From davidcharvey at googlemail.com Wed Nov 15 13:24:24 2017 Content-Type: multipart/mixed; boundary="===============6052338678422002497==" MIME-Version: 1.0 From: David Harvey To: freeipa-users at lists.fedorahosted.org Subject: [Freeipa-users] upgrade to ubuntu 17.10 fails Date: Wed, 15 Nov 2017 13:23:49 +0000 Message-ID: --===============6052338678422002497== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Hi wisdom of the list, I know I am an edge case with running on ubuntu, but hoped someone might be able to shed some light. A bit of background. I'm trying to test upgrades without potentially hosing my existing services, so I have cloned the VM, given it a new IP address, updated hosts file and pointed DNS somewhere that doesn't know about the real IPA services (8.8.8.8) so it won't try and sync or replicate. Attempting to upgrade hits a snags or two, some described in bugs already like the pki version number confusing the apt scripts https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1703051 ). The one I can't work around however is below. It seems deeply unhappy, and restarting the services result in the dogtag-pki web page being available until a login attempt is made (as occurs during the ipa-server-upgrade) after which point it bombs with a 500 error. Could the below caused by https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1716842 ? Any advice appreciated, as I think even when 18.04 hits with the proposed updates to rely on to tomcat 8.5, I'll still need to upgrade via 17.10 which seems currently fraught! If it relates to my method of cloning the VM, is there a better way of testing upgrades without potentially hosing the existing live systems? Thanks in advance, David 2017-11-15T13:05:59Z DEBUG approved_usage =3D SSL Server intended_usage =3D= SSL Server 2017-11-15T13:05:59Z DEBUG cert valid True for "CN=3Dipa1.my.net,O=3DTHOMAC= .NET" 2017-11-15T13:05:59Z DEBUG handshake complete, peer =3D IPADDRESS 2017-11-15T13:05:59Z DEBUG Protocol: TLS1.2 2017-11-15T13:05:59Z DEBUG Cipher: TLS_RSA_WITH_AES_128_CBC_SHA 2017-11-15T13:05:59Z DEBUG response status 500 2017-11-15T13:05:59Z DEBUG response headers {'content-length': '2292', 'content-language': 'en', 'server': 'Apache-Coyote/1.1', 'connection': 'close', 'date': 'Wed, 15 Nov 2017 13:05:59 GMT', 'content-type': 'text/html;charset=3Dutf-8'} 2017-11-15T13:05:59Z DEBUG response body 'Apache Tomcat/8.0.46 (Ubuntu) - Error report

HTTP Status 500 - Subsystem unavailable

type Exception report

message Subsystem unavailable

description The server encountered an internal error that prevented it from fulfilling this request.

exception

javax.ws.rs.ServiceUnavailableE=
xception:
Subsystem
unavailable\n\tcom.netscape.cms.tomcat.ProxyRealm.findSecurityConstraints(P=
roxyRealm.java:138)\n\torg.apache.catalina.authenticator.AuthenticatorBase.=
invoke(AuthenticatorBase.java:498)\n\torg.apache.catalina.valves.ErrorRepor=
tValve.invoke(ErrorReportValve.java:79)\n\torg.apache.catalina.valves.Abstr=
actAccessLogValve.invoke(AbstractAccessLogValve.java:620)\n\torg.apache.cat=
alina.connector.CoyoteAdapter.service(CoyoteAdapter.java:502)\n\torg.apache=
.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java=
:1132)\n\torg.apache.coyote.AbstractProtocol$AbstractConnectionHandler.proc=
ess(AbstractProtocol.java:684)\n\torg.apache.tomcat.util.net.JIoEndpoint$So=
cketProcessor.run(JIoEndpoint.java:283)\n\tjava.util.concurrent.ThreadPoolE=
xecutor.runWorker(ThreadPoolExecutor.java:1149)\n\tjava.util.concurrent.Thr=
eadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)\n\torg.apache.tomca=
t.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)\n\tjava.=
lang.Thread.run(Thread.java:748)\n

note The full stack trace of the root cause is available in the Apache Tomcat/8.0.46 (Ubuntu) logs.

Apache Tomcat/8.0.46 (Ubuntu)

' 2017-11-15T13:05:59Z ERROR IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. 2017-11-15T13:05:59Z DEBUG File "/usr/lib/python2.7/dist-packages/ipapython/admintool.py", line 172, in execute return_value =3D self.run() File "/usr/lib/python2.7/dist-packages/ipaserver/install/ipa_server_upgrade.py", line 46, in run server.upgrade() File "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py", line 1878, in upgrade upgrade_configuration() File "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py", line 1797, in upgrade_configuration ca_enable_ldap_profile_subsystem(ca) File "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py", line 347, in ca_enable_ldap_profile_subsystem cainstance.migrate_profiles_to_ldap() File "/usr/lib/python2.7/dist-packages/ipaserver/install/cainstance.py", line 1981, in migrate_profiles_to_ldap _create_dogtag_profile(profile_id, profile_data, overwrite=3DFalse) File "/usr/lib/python2.7/dist-packages/ipaserver/install/cainstance.py", line 1987, in _create_dogtag_profile with api.Backend.ra_certprofile as profile_api: File "/usr/lib/python2.7/dist-packages/ipaserver/plugins/dogtag.py", line 1294, in __enter__ raise errors.RemoteRetrieveError(reason=3D_('Failed to authenticate to = CA REST API')) 2017-11-15T13:05:59Z DEBUG The ipa-server-upgrade command failed, exception: RemoteRetrieveError: Failed to authenticate to CA REST API 2017-11-15T13:05:59Z ERROR Unexpected error - see /var/log/ipaupgrade.log for details: RemoteRetrieveError: Failed to authenticate to CA REST API --===============6052338678422002497== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGRpdiBkaXI9Imx0ciI+PGRpdj5IaSB3aXNkb20gb2YgdGhlIGxpc3QsPC9kaXY+PGRpdj48YnI+ PC9kaXY+PGRpdj5JIGtub3cgSSBhbSBhbiBlZGdlIGNhc2Ugd2l0aCBydW5uaW5nIG9uIHVidW50 dSwgYnV0IGhvcGVkIHNvbWVvbmUgbWlnaHQgYmUgYWJsZSB0byBzaGVkIHNvbWUgbGlnaHQuPC9k aXY+PGRpdj48YnI+PC9kaXY+PGRpdj5BIGJpdCBvZiBiYWNrZ3JvdW5kLsKgIEkmIzM5O20gdHJ5 aW5nIHRvIHRlc3QgdXBncmFkZXMgd2l0aG91dCBwb3RlbnRpYWxseSBob3NpbmcgbXkgZXhpc3Rp bmcgc2VydmljZXMsIHNvIEkgaGF2ZSBjbG9uZWQgdGhlIFZNLCBnaXZlbiBpdCBhIG5ldyBJUCBh ZGRyZXNzLCB1cGRhdGVkIGhvc3RzIGZpbGUgYW5kIHBvaW50ZWQgRE5TIHNvbWV3aGVyZSB0aGF0 IGRvZXNuJiMzOTt0IGtub3cgYWJvdXQgdGhlIHJlYWwgSVBBIHNlcnZpY2VzICg4LjguOC44KSBz byBpdCB3b24mIzM5O3QgdHJ5IGFuZCBzeW5jIG9yIHJlcGxpY2F0ZS48L2Rpdj48ZGl2Pjxicj48 L2Rpdj48ZGl2PkF0dGVtcHRpbmcgdG8gdXBncmFkZSBoaXRzIGEgc25hZ3Mgb3IgdHdvLCBzb21l IGRlc2NyaWJlZCBpbiBidWdzIGFscmVhZHkgbGlrZSB0aGUgcGtpIHZlcnNpb24gbnVtYmVyIGNv bmZ1c2luZyB0aGUgYXB0IHNjcmlwdHPCoDxhIGhyZWY9Imh0dHBzOi8vYnVncy5sYXVuY2hwYWQu bmV0L3VidW50dS8rc291cmNlL2ZyZWVpcGEvK2J1Zy8xNzAzMDUxIj5odHRwczovL2J1Z3MubGF1 bmNocGFkLm5ldC91YnVudHUvK3NvdXJjZS9mcmVlaXBhLytidWcvMTcwMzA1MTwvYT4gKS4gVGhl IG9uZSBJIGNhbiYjMzk7dCB3b3JrIGFyb3VuZCBob3dldmVyIGlzIGJlbG93LjwvZGl2PjxkaXY+ PGJyPjwvZGl2PjxkaXY+SXQgc2VlbXMgZGVlcGx5IHVuaGFwcHksIGFuZCByZXN0YXJ0aW5nIHRo ZSBzZXJ2aWNlcyByZXN1bHQgaW4gdGhlIGRvZ3RhZy1wa2kgd2ViIHBhZ2UgYmVpbmcgYXZhaWxh YmxlIHVudGlsIGEgbG9naW4gYXR0ZW1wdCBpcyBtYWRlIChhcyBvY2N1cnMgZHVyaW5nIHRoZSBp cGEtc2VydmVyLXVwZ3JhZGUpIGFmdGVyIHdoaWNoIHBvaW50IGl0IGJvbWJzIHdpdGggYSA1MDAg ZXJyb3IuPC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj5Db3VsZCB0aGUgYmVsb3cgY2F1c2VkIGJ5 wqA8YSBocmVmPSJodHRwczovL2J1Z3MubGF1bmNocGFkLm5ldC91YnVudHUvK3NvdXJjZS9mcmVl aXBhLytidWcvMTcxNjg0MiI+aHR0cHM6Ly9idWdzLmxhdW5jaHBhZC5uZXQvdWJ1bnR1Lytzb3Vy Y2UvZnJlZWlwYS8rYnVnLzE3MTY4NDI8L2E+ID88YnI+PC9kaXY+PGRpdj48YnI+PC9kaXY+PGRp dj5BbnkgYWR2aWNlIGFwcHJlY2lhdGVkLCBhcyBJIHRoaW5rIGV2ZW4gd2hlbiAxOC4wNCBoaXRz IHdpdGggdGhlIHByb3Bvc2VkIHVwZGF0ZXMgdG8gcmVseSBvbiB0byB0b21jYXQgOC41LCBJJiMz OTtsbCBzdGlsbCBuZWVkIHRvIHVwZ3JhZGUgdmlhIDE3LjEwIHdoaWNoIHNlZW1zIGN1cnJlbnRs eSBmcmF1Z2h0IcKgIElmIGl0IHJlbGF0ZXMgdG8gbXkgbWV0aG9kIG9mIGNsb25pbmcgdGhlIFZN LCBpcyB0aGVyZSBhIGJldHRlciB3YXkgb2YgdGVzdGluZyB1cGdyYWRlcyB3aXRob3V0IHBvdGVu dGlhbGx5IGhvc2luZyB0aGUgZXhpc3RpbmcgbGl2ZSBzeXN0ZW1zPzwvZGl2PjxkaXY+PGJyPjwv ZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+VGhhbmtzIGluIGFkdmFuY2UsPC9kaXY+PGRpdj48YnI+ PC9kaXY+PGRpdj5EYXZpZDwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+MjAxNy0xMS0xNVQxMzow NTo1OVogREVCVUcgYXBwcm92ZWRfdXNhZ2UgPSBTU0wgU2VydmVyIGludGVuZGVkX3VzYWdlID0g U1NMIFNlcnZlcjwvZGl2PjxkaXY+MjAxNy0xMS0xNVQxMzowNTo1OVogREVCVUcgY2VydCB2YWxp ZCBUcnVlIGZvciAmcXVvdDtDTj08YSBocmVmPSJodHRwOi8vaXBhMS5teS5uZXQiPmlwYTEubXku bmV0PC9hPixPPTxhIGhyZWY9Imh0dHA6Ly9USE9NQUMuTkVUIj5USE9NQUMuTkVUPC9hPiZxdW90 OzwvZGl2PjxkaXY+MjAxNy0xMS0xNVQxMzowNTo1OVogREVCVUcgaGFuZHNoYWtlIGNvbXBsZXRl LCBwZWVyID0gSVBBRERSRVNTPC9kaXY+PGRpdj4yMDE3LTExLTE1VDEzOjA1OjU5WiBERUJVRyBQ cm90b2NvbDogVExTMS4yPC9kaXY+PGRpdj4yMDE3LTExLTE1VDEzOjA1OjU5WiBERUJVRyBDaXBo ZXI6IFRMU19SU0FfV0lUSF9BRVNfMTI4X0NCQ19TSEE8L2Rpdj48ZGl2PjIwMTctMTEtMTVUMTM6 MDU6NTlaIERFQlVHIHJlc3BvbnNlIHN0YXR1cyA1MDA8L2Rpdj48ZGl2PjIwMTctMTEtMTVUMTM6 MDU6NTlaIERFQlVHIHJlc3BvbnNlIGhlYWRlcnMgeyYjMzk7Y29udGVudC1sZW5ndGgmIzM5Ozog JiMzOTsyMjkyJiMzOTssICYjMzk7Y29udGVudC1sYW5ndWFnZSYjMzk7OiAmIzM5O2VuJiMzOTss ICYjMzk7c2VydmVyJiMzOTs6ICYjMzk7QXBhY2hlLUNveW90ZS8xLjEmIzM5OywgJiMzOTtjb25u ZWN0aW9uJiMzOTs6ICYjMzk7Y2xvc2UmIzM5OywgJiMzOTtkYXRlJiMzOTs6ICYjMzk7V2VkLCAx NSBOb3YgMjAxNyAxMzowNTo1OSBHTVQmIzM5OywgJiMzOTtjb250ZW50LXR5cGUmIzM5OzogJiMz OTt0ZXh0L2h0bWw7Y2hhcnNldD11dGYtOCYjMzk7fTwvZGl2PjxkaXY+MjAxNy0xMS0xNVQxMzow NTo1OVogREVCVUcgcmVzcG9uc2UgYm9keSAmIzM5OyZsdDshRE9DVFlQRSBodG1sJmd0OyZsdDto dG1sJmd0OyZsdDtoZWFkJmd0OyZsdDt0aXRsZSZndDtBcGFjaGUgVG9tY2F0LzguMC40NiAoVWJ1 bnR1KSAtIEVycm9yIHJlcG9ydCZsdDsvdGl0bGUmZ3Q7Jmx0O3N0eWxlIHR5cGU9JnF1b3Q7dGV4 dC9jc3MmcXVvdDsmZ3Q7SDEge2ZvbnQtZmFtaWx5OlRhaG9tYSxBcmlhbCxzYW5zLXNlcmlmO2Nv bG9yOndoaXRlO2JhY2tncm91bmQtY29sb3I6IzUyNUQ3Njtmb250LXNpemU6MjJweDt9IEgyIHtm b250LWZhbWlseTpUYWhvbWEsQXJpYWwsc2Fucy1zZXJpZjtjb2xvcjp3aGl0ZTtiYWNrZ3JvdW5k LWNvbG9yOiM1MjVENzY7Zm9udC1zaXplOjE2cHg7fSBIMyB7Zm9udC1mYW1pbHk6VGFob21hLEFy aWFsLHNhbnMtc2VyaWY7Y29sb3I6d2hpdGU7YmFja2dyb3VuZC1jb2xvcjojNTI1RDc2O2ZvbnQt c2l6ZToxNHB4O30gQk9EWSB7Zm9udC1mYW1pbHk6VGFob21hLEFyaWFsLHNhbnMtc2VyaWY7Y29s b3I6YmxhY2s7YmFja2dyb3VuZC1jb2xvcjp3aGl0ZTt9IEIge2ZvbnQtZmFtaWx5OlRhaG9tYSxB cmlhbCxzYW5zLXNlcmlmO2NvbG9yOndoaXRlO2JhY2tncm91bmQtY29sb3I6IzUyNUQ3Njt9IFAg e2ZvbnQtZmFtaWx5OlRhaG9tYSxBcmlhbCxzYW5zLXNlcmlmO2JhY2tncm91bmQ6d2hpdGU7Y29s b3I6YmxhY2s7Zm9udC1zaXplOjEycHg7fUEge2NvbG9yIDogYmxhY2s7fUEubmFtZSB7Y29sb3Ig OiBibGFjazt9LmxpbmUge2hlaWdodDogMXB4OyBiYWNrZ3JvdW5kLWNvbG9yOiAjNTI1RDc2OyBi b3JkZXI6IG5vbmU7fSZsdDsvc3R5bGUmZ3Q7ICZsdDsvaGVhZCZndDsmbHQ7Ym9keSZndDsmbHQ7 aDEmZ3Q7SFRUUCBTdGF0dXMgNTAwIC0gU3Vic3lzdGVtIHVuYXZhaWxhYmxlJmx0Oy9oMSZndDsm bHQ7ZGl2IGNsYXNzPSZxdW90O2xpbmUmcXVvdDsmZ3Q7Jmx0Oy9kaXYmZ3Q7Jmx0O3AmZ3Q7Jmx0 O2ImZ3Q7dHlwZSZsdDsvYiZndDsgRXhjZXB0aW9uIHJlcG9ydCZsdDsvcCZndDsmbHQ7cCZndDsm bHQ7YiZndDttZXNzYWdlJmx0Oy9iJmd0OyAmbHQ7dSZndDtTdWJzeXN0ZW0gdW5hdmFpbGFibGUm bHQ7L3UmZ3Q7Jmx0Oy9wJmd0OyZsdDtwJmd0OyZsdDtiJmd0O2Rlc2NyaXB0aW9uJmx0Oy9iJmd0 OyAmbHQ7dSZndDtUaGUgc2VydmVyIGVuY291bnRlcmVkIGFuIGludGVybmFsIGVycm9yIHRoYXQg cHJldmVudGVkIGl0IGZyb20gZnVsZmlsbGluZyB0aGlzIHJlcXVlc3QuJmx0Oy91Jmd0OyZsdDsv cCZndDsmbHQ7cCZndDsmbHQ7YiZndDtleGNlcHRpb24mbHQ7L2ImZ3Q7Jmx0Oy9wJmd0OyZsdDtw cmUmZ3Q7amF2YXgud3MucnMuU2VydmljZVVuYXZhaWxhYmxlRXhjZXB0aW9uOiBTdWJzeXN0ZW0g dW5hdmFpbGFibGVcblx0Y29tLm5ldHNjYXBlLmNtcy50b21jYXQuUHJveHlSZWFsbS5maW5kU2Vj dXJpdHlDb25zdHJhaW50cyhQcm94eVJlYWxtLmphdmE6MTM4KVxuXHRvcmcuYXBhY2hlLmNhdGFs aW5hLmF1dGhlbnRpY2F0b3IuQXV0aGVudGljYXRvckJhc2UuaW52b2tlKEF1dGhlbnRpY2F0b3JC YXNlLmphdmE6NDk4KVxuXHRvcmcuYXBhY2hlLmNhdGFsaW5hLnZhbHZlcy5FcnJvclJlcG9ydFZh bHZlLmludm9rZShFcnJvclJlcG9ydFZhbHZlLmphdmE6NzkpXG5cdG9yZy5hcGFjaGUuY2F0YWxp bmEudmFsdmVzLkFic3RyYWN0QWNjZXNzTG9nVmFsdmUuaW52b2tlKEFic3RyYWN0QWNjZXNzTG9n VmFsdmUuamF2YTo2MjApXG5cdG9yZy5hcGFjaGUuY2F0YWxpbmEuY29ubmVjdG9yLkNveW90ZUFk YXB0ZXIuc2VydmljZShDb3lvdGVBZGFwdGVyLmphdmE6NTAyKVxuXHRvcmcuYXBhY2hlLmNveW90 ZS5odHRwMTEuQWJzdHJhY3RIdHRwMTFQcm9jZXNzb3IucHJvY2VzcyhBYnN0cmFjdEh0dHAxMVBy b2Nlc3Nvci5qYXZhOjExMzIpXG5cdG9yZy5hcGFjaGUuY295b3RlLkFic3RyYWN0UHJvdG9jb2wk QWJzdHJhY3RDb25uZWN0aW9uSGFuZGxlci5wcm9jZXNzKEFic3RyYWN0UHJvdG9jb2wuamF2YTo2 ODQpXG5cdG9yZy5hcGFjaGUudG9tY2F0LnV0aWwubmV0LkpJb0VuZHBvaW50JFNvY2tldFByb2Nl c3Nvci5ydW4oSklvRW5kcG9pbnQuamF2YToyODMpXG5cdGphdmEudXRpbC5jb25jdXJyZW50LlRo cmVhZFBvb2xFeGVjdXRvci5ydW5Xb3JrZXIoVGhyZWFkUG9vbEV4ZWN1dG9yLmphdmE6MTE0OSlc blx0amF2YS51dGlsLmNvbmN1cnJlbnQuVGhyZWFkUG9vbEV4ZWN1dG9yJFdvcmtlci5ydW4oVGhy ZWFkUG9vbEV4ZWN1dG9yLmphdmE6NjI0KVxuXHRvcmcuYXBhY2hlLnRvbWNhdC51dGlsLnRocmVh ZHMuVGFza1RocmVhZCRXcmFwcGluZ1J1bm5hYmxlLnJ1bihUYXNrVGhyZWFkLmphdmE6NjEpXG5c dGphdmEubGFuZy5UaHJlYWQucnVuKFRocmVhZC5qYXZhOjc0OClcbiZsdDsvcHJlJmd0OyZsdDtw Jmd0OyZsdDtiJmd0O25vdGUmbHQ7L2ImZ3Q7ICZsdDt1Jmd0O1RoZSBmdWxsIHN0YWNrIHRyYWNl IG9mIHRoZSByb290IGNhdXNlIGlzIGF2YWlsYWJsZSBpbiB0aGUgQXBhY2hlIFRvbWNhdC84LjAu NDYgKFVidW50dSkgbG9ncy4mbHQ7L3UmZ3Q7Jmx0Oy9wJmd0OyZsdDtociBjbGFzcz0mcXVvdDts aW5lJnF1b3Q7Jmd0OyZsdDtoMyZndDtBcGFjaGUgVG9tY2F0LzguMC40NiAoVWJ1bnR1KSZsdDsv aDMmZ3Q7Jmx0Oy9ib2R5Jmd0OyZsdDsvaHRtbCZndDsmIzM5OzwvZGl2PjxkaXY+MjAxNy0xMS0x NVQxMzowNTo1OVogRVJST1IgSVBBIHNlcnZlciB1cGdyYWRlIGZhaWxlZDogSW5zcGVjdCAvdmFy L2xvZy9pcGF1cGdyYWRlLmxvZyBhbmQgcnVuIGNvbW1hbmQgaXBhLXNlcnZlci11cGdyYWRlIG1h bnVhbGx5LjwvZGl2PjxkaXY+MjAxNy0xMS0xNVQxMzowNTo1OVogREVCVUfCoCDCoEZpbGUgJnF1 b3Q7L3Vzci9saWIvcHl0aG9uMi43L2Rpc3QtcGFja2FnZXMvaXBhcHl0aG9uL2FkbWludG9vbC5w eSZxdW90OywgbGluZSAxNzIsIGluIGV4ZWN1dGU8L2Rpdj48ZGl2PsKgIMKgIHJldHVybl92YWx1 ZSA9IHNlbGYucnVuKCk8L2Rpdj48ZGl2PsKgIEZpbGUgJnF1b3Q7L3Vzci9saWIvcHl0aG9uMi43 L2Rpc3QtcGFja2FnZXMvaXBhc2VydmVyL2luc3RhbGwvaXBhX3NlcnZlcl91cGdyYWRlLnB5JnF1 b3Q7LCBsaW5lIDQ2LCBpbiBydW48L2Rpdj48ZGl2PsKgIMKgIHNlcnZlci51cGdyYWRlKCk8L2Rp dj48ZGl2PsKgIEZpbGUgJnF1b3Q7L3Vzci9saWIvcHl0aG9uMi43L2Rpc3QtcGFja2FnZXMvaXBh c2VydmVyL2luc3RhbGwvc2VydmVyL3VwZ3JhZGUucHkmcXVvdDssIGxpbmUgMTg3OCwgaW4gdXBn cmFkZTwvZGl2PjxkaXY+wqAgwqAgdXBncmFkZV9jb25maWd1cmF0aW9uKCk8L2Rpdj48ZGl2PsKg IEZpbGUgJnF1b3Q7L3Vzci9saWIvcHl0aG9uMi43L2Rpc3QtcGFja2FnZXMvaXBhc2VydmVyL2lu c3RhbGwvc2VydmVyL3VwZ3JhZGUucHkmcXVvdDssIGxpbmUgMTc5NywgaW4gdXBncmFkZV9jb25m aWd1cmF0aW9uPC9kaXY+PGRpdj7CoCDCoCBjYV9lbmFibGVfbGRhcF9wcm9maWxlX3N1YnN5c3Rl bShjYSk8L2Rpdj48ZGl2PsKgIEZpbGUgJnF1b3Q7L3Vzci9saWIvcHl0aG9uMi43L2Rpc3QtcGFj a2FnZXMvaXBhc2VydmVyL2luc3RhbGwvc2VydmVyL3VwZ3JhZGUucHkmcXVvdDssIGxpbmUgMzQ3 LCBpbiBjYV9lbmFibGVfbGRhcF9wcm9maWxlX3N1YnN5c3RlbTwvZGl2PjxkaXY+wqAgwqAgY2Fp bnN0YW5jZS5taWdyYXRlX3Byb2ZpbGVzX3RvX2xkYXAoKTwvZGl2PjxkaXY+wqAgRmlsZSAmcXVv dDsvdXNyL2xpYi9weXRob24yLjcvZGlzdC1wYWNrYWdlcy9pcGFzZXJ2ZXIvaW5zdGFsbC9jYWlu c3RhbmNlLnB5JnF1b3Q7LCBsaW5lIDE5ODEsIGluIG1pZ3JhdGVfcHJvZmlsZXNfdG9fbGRhcDwv ZGl2PjxkaXY+wqAgwqAgX2NyZWF0ZV9kb2d0YWdfcHJvZmlsZShwcm9maWxlX2lkLCBwcm9maWxl X2RhdGEsIG92ZXJ3cml0ZT1GYWxzZSk8L2Rpdj48ZGl2PsKgIEZpbGUgJnF1b3Q7L3Vzci9saWIv cHl0aG9uMi43L2Rpc3QtcGFja2FnZXMvaXBhc2VydmVyL2luc3RhbGwvY2FpbnN0YW5jZS5weSZx dW90OywgbGluZSAxOTg3LCBpbiBfY3JlYXRlX2RvZ3RhZ19wcm9maWxlPC9kaXY+PGRpdj7CoCDC oCB3aXRoIGFwaS5CYWNrZW5kLnJhX2NlcnRwcm9maWxlIGFzIHByb2ZpbGVfYXBpOjwvZGl2Pjxk aXY+wqAgRmlsZSAmcXVvdDsvdXNyL2xpYi9weXRob24yLjcvZGlzdC1wYWNrYWdlcy9pcGFzZXJ2 ZXIvcGx1Z2lucy9kb2d0YWcucHkmcXVvdDssIGxpbmUgMTI5NCwgaW4gX19lbnRlcl9fPC9kaXY+ PGRpdj7CoCDCoCByYWlzZSBlcnJvcnMuUmVtb3RlUmV0cmlldmVFcnJvcihyZWFzb249XygmIzM5 O0ZhaWxlZCB0byBhdXRoZW50aWNhdGUgdG8gQ0EgUkVTVCBBUEkmIzM5OykpPC9kaXY+PGRpdj48 YnI+PC9kaXY+PGRpdj4yMDE3LTExLTE1VDEzOjA1OjU5WiBERUJVRyBUaGUgaXBhLXNlcnZlci11 cGdyYWRlIGNvbW1hbmQgZmFpbGVkLCBleGNlcHRpb246IFJlbW90ZVJldHJpZXZlRXJyb3I6IEZh aWxlZCB0byBhdXRoZW50aWNhdGUgdG8gQ0EgUkVTVCBBUEk8L2Rpdj48ZGl2PjIwMTctMTEtMTVU MTM6MDU6NTlaIEVSUk9SIFVuZXhwZWN0ZWQgZXJyb3IgLSBzZWUgL3Zhci9sb2cvaXBhdXBncmFk ZS5sb2cgZm9yIGRldGFpbHM6PC9kaXY+PGRpdj5SZW1vdGVSZXRyaWV2ZUVycm9yOiBGYWlsZWQg dG8gYXV0aGVudGljYXRlIHRvIENBIFJFU1QgQVBJPC9kaXY+PGRpdj48YnI+PC9kaXY+PC9kaXY+ Cg== --===============6052338678422002497==-- From davidcharvey at googlemail.com Wed Nov 15 13:31:03 2017 Content-Type: multipart/mixed; boundary="===============2637993149002811310==" MIME-Version: 1.0 From: David Harvey To: freeipa-users at lists.fedorahosted.org Subject: [Freeipa-users] Re: upgrade to ubuntu 17.10 fails Date: Wed, 15 Nov 2017 13:30:22 +0000 Message-ID: In-Reply-To: CADq_JGqur3Nh+sQpRxMptLb-B+qLmy4WQv+ZZ2LsFH-ukZo=sg@mail.gmail.com --===============2637993149002811310== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Sorry for the dump size, but not sure if the below from /var/log/pki/pki-tomcat/localhost.date.log helps: 15-Nov-2017 12:14:50.557 SEVERE [localhost-startStop-1] org.apache.catalina.core.ApplicationContext.log StandardWrapper.Throwable java.lang.NullPointerException at com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown(SelfTestSubsystem= .java:1886) at com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEngine.java:2118) at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) at com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartServlet.java:114) at javax.servlet.GenericServlet.init(GenericServlet.java:158) at org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java:1= 227) at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1= 140) at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:1027) at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java= :5038) at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java= :5348) at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:= 753) at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:729) at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:717) at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:621) at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java= :1835) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1= 149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:= 624) at java.lang.Thread.run(Thread.java:748) 15-Nov-2017 12:14:50.558 SEVERE [localhost-startStop-1] org.apache.catalina.core.StandardContext.loadOnStartup Servlet [castart] in web application [/ca] threw load() exception java.lang.NullPointerException at com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown(SelfTestSubsystem= .java:1886) at com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEngine.java:2118) at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) at com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartServlet.java:114) at javax.servlet.GenericServlet.init(GenericServlet.java:158) at org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java:1= 227) at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1= 140) at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:1027) at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java= :5038) at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java= :5348) at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:= 753) at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:729) at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:717) at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:621) at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java= :1835) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1= 149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:= 624) at java.lang.Thread.run(Thread.java:748) 15-Nov-2017 12:14:54.509 SEVERE [http-bio-8443-exec-1] org.apache.catalina.core.StandardHostValve.invoke Exception Processing /ca/rest/account/login javax.ws.rs.ServiceUnavailableException: Subsystem unavailable at com.netscape.cms.tomcat.ProxyRealm.findSecurityConstraints(ProxyRealm.java:= 138) at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBas= e.java:498) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:14= 1) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:79) at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogV= alve.java:620) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.jav= a:88) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:502) at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Proc= essor.java:1132) at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(Abstra= ctProtocol.java:684) at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java= :283) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1= 149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:= 624) at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.j= ava:61) at java.lang.Thread.run(Thread.java:748) 15-Nov-2017 13:05:55.874 SEVERE [localhost-startStop-1] org.apache.catalina.core.ApplicationContext.log StandardWrapper.Throwable java.lang.NullPointerException at com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown(SelfTestSubsystem= .java:1886) at com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEngine.java:2118) at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) at com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartServlet.java:114) at javax.servlet.GenericServlet.init(GenericServlet.java:158) at org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java:1= 227) at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1= 140) at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:1027) at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java= :5038) at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java= :5348) at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:= 753) at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:729) at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:717) at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:621) at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java= :1835) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1= 149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:= 624) at java.lang.Thread.run(Thread.java:748) 15-Nov-2017 13:05:55.875 SEVERE [localhost-startStop-1] org.apache.catalina.core.StandardContext.loadOnStartup Servlet [castart] in web application [/ca] threw load() exception java.lang.NullPointerException at com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown(SelfTestSubsystem= .java:1886) at com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEngine.java:2118) at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) at com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartServlet.java:114) at javax.servlet.GenericServlet.init(GenericServlet.java:158) at org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java:1= 227) at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1= 140) at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:1027) at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java= :5038) at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java= :5348) at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:= 753) at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:729) at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:717) at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:621) at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java= :1835) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1= 149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:= 624) at java.lang.Thread.run(Thread.java:748) 15-Nov-2017 13:05:59.706 SEVERE [http-bio-8443-exec-1] org.apache.catalina.core.StandardHostValve.invoke Exception Processing /ca/rest/account/login javax.ws.rs.ServiceUnavailableException: Subsystem unavailable at com.netscape.cms.tomcat.ProxyRealm.findSecurityConstraints(ProxyRealm.java:= 138) at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBas= e.java:498) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:14= 1) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:79) at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogV= alve.java:620) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.jav= a:88) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:502) at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Proc= essor.java:1132) at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(Abstra= ctProtocol.java:684) at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java= :283) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1= 149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:= 624) at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.j= ava:61) at java.lang.Thread.run(Thread.java:748) On 15 November 2017 at 13:23, David Harvey wrote: > Hi wisdom of the list, > > I know I am an edge case with running on ubuntu, but hoped someone might > be able to shed some light. > > A bit of background. I'm trying to test upgrades without potentially > hosing my existing services, so I have cloned the VM, given it a new IP > address, updated hosts file and pointed DNS somewhere that doesn't know > about the real IPA services (8.8.8.8) so it won't try and sync or replica= te. > > Attempting to upgrade hits a snags or two, some described in bugs already > like the pki version number confusing the apt scripts https://bugs. > launchpad.net/ubuntu/+source/freeipa/+bug/1703051 ). The one I can't work > around however is below. > > It seems deeply unhappy, and restarting the services result in the > dogtag-pki web page being available until a login attempt is made (as > occurs during the ipa-server-upgrade) after which point it bombs with a 5= 00 > error. > > Could the below caused by https://bugs.launchpad.net/ > ubuntu/+source/freeipa/+bug/1716842 ? > > Any advice appreciated, as I think even when 18.04 hits with the proposed > updates to rely on to tomcat 8.5, I'll still need to upgrade via 17.10 > which seems currently fraught! If it relates to my method of cloning the > VM, is there a better way of testing upgrades without potentially hosing > the existing live systems? > > > Thanks in advance, > > David > > 2017-11-15T13:05:59Z DEBUG approved_usage =3D SSL Server intended_usage = =3D > SSL Server > 2017-11-15T13:05:59Z DEBUG cert valid True for "CN=3Dipa1.my.net,O=3D > THOMAC.NET" > 2017-11-15T13:05:59Z DEBUG handshake complete, peer =3D IPADDRESS > 2017-11-15T13:05:59Z DEBUG Protocol: TLS1.2 > 2017-11-15T13:05:59Z DEBUG Cipher: TLS_RSA_WITH_AES_128_CBC_SHA > 2017-11-15T13:05:59Z DEBUG response status 500 > 2017-11-15T13:05:59Z DEBUG response headers {'content-length': '2292', > 'content-language': 'en', 'server': 'Apache-Coyote/1.1', 'connection': > 'close', 'date': 'Wed, 15 Nov 2017 13:05:59 GMT', 'content-type': > 'text/html;charset=3Dutf-8'} > 2017-11-15T13:05:59Z DEBUG response body ' html>Apache Tomcat/8.0.46 (Ubuntu) - Error > report

HTTP > Status 500 - Subsystem unavailable

ty= pe > Exception report

message Subsystem unavailable

= description > The server encountered an internal error that prevented it from > fulfilling this request.

exception

javax.ws.rs.S=
erviceUnavailableException:
> Subsystem unavailable\n\tcom.netscape.cms.tomcat.ProxyRealm.
> findSecurityConstraints(ProxyRealm.java:138)\n\torg.
> apache.catalina.authenticator.AuthenticatorBase.invoke(
> AuthenticatorBase.java:498)\n\torg.apache.catalina.valves.
> ErrorReportValve.invoke(ErrorReportValve.java:79)\n\
> torg.apache.catalina.valves.AbstractAccessLogValve.invoke(
> AbstractAccessLogValve.java:620)\n\torg.apache.catalina.
> connector.CoyoteAdapter.service(CoyoteAdapter.java:
> 502)\n\torg.apache.coyote.http11.AbstractHttp11Processor.process(
> AbstractHttp11Processor.java:1132)\n\torg.apache.coyote.AbstractProtocol$
> AbstractConnectionHandler.process(AbstractProtocol.java:
> 684)\n\torg.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(
> JIoEndpoint.java:283)\n\tjava.util.concurrent.
> ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)\
> n\tjava.util.concurrent.ThreadPoolExecutor$Worker.run(
> ThreadPoolExecutor.java:624)\n\torg.apache.tomcat.util.threads.TaskThread$
> WrappingRunnable.run(TaskThread.java:61)\n\tjava.
> lang.Thread.run(Thread.java:748)\n

note The full stack > trace of the root cause is available in the Apache Tomcat/8.0.46 (Ubuntu) > logs.

Apache Tomcat/8.0.46 > (Ubuntu)

' > 2017-11-15T13:05:59Z ERROR IPA server upgrade failed: Inspect > /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. > 2017-11-15T13:05:59Z DEBUG File "/usr/lib/python2.7/dist- > packages/ipapython/admintool.py", line 172, in execute > return_value =3D self.run() > File "/usr/lib/python2.7/dist-packages/ipaserver/install/ipa_server_upg= rade.py", > line 46, in run > server.upgrade() > File "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade= .py", > line 1878, in upgrade > upgrade_configuration() > File "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade= .py", > line 1797, in upgrade_configuration > ca_enable_ldap_profile_subsystem(ca) > File "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade= .py", > line 347, in ca_enable_ldap_profile_subsystem > cainstance.migrate_profiles_to_ldap() > File "/usr/lib/python2.7/dist-packages/ipaserver/install/cainstance.py", > line 1981, in migrate_profiles_to_ldap > _create_dogtag_profile(profile_id, profile_data, overwrite=3DFalse) > File "/usr/lib/python2.7/dist-packages/ipaserver/install/cainstance.py", > line 1987, in _create_dogtag_profile > with api.Backend.ra_certprofile as profile_api: > File "/usr/lib/python2.7/dist-packages/ipaserver/plugins/dogtag.py", > line 1294, in __enter__ > raise errors.RemoteRetrieveError(reason=3D_('Failed to authenticate to > CA REST API')) > > 2017-11-15T13:05:59Z DEBUG The ipa-server-upgrade command failed, > exception: RemoteRetrieveError: Failed to authenticate to CA REST API > 2017-11-15T13:05:59Z ERROR Unexpected error - see /var/log/ipaupgrade.log > for details: > RemoteRetrieveError: Failed to authenticate to CA REST API > > --===============2637993149002811310== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGRpdiBkaXI9Imx0ciI+U29ycnkgZm9yIHRoZSBkdW1wIHNpemUsIGJ1dCBub3Qgc3VyZSBpZiB0 aGUgYmVsb3cgZnJvbSAvdmFyL2xvZy9wa2kvcGtpLXRvbWNhdC9sb2NhbGhvc3QuZGF0ZS5sb2cg aGVscHM6PGRpdj48YnI+PC9kaXY+PGRpdj48ZGl2PjE1LU5vdi0yMDE3IDEyOjE0OjUwLjU1NyBT RVZFUkUgW2xvY2FsaG9zdC1zdGFydFN0b3AtMV0gb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLkFw cGxpY2F0aW9uQ29udGV4dC5sb2cgU3RhbmRhcmRXcmFwcGVyLlRocm93YWJsZTwvZGl2PjxkaXY+ wqBqYXZhLmxhbmcuTnVsbFBvaW50ZXJFeGNlcHRpb248L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3 aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQgY29tLm5ldHNjYXBlLmNtc2NvcmUuc2VsZnRlc3Rz LlNlbGZUZXN0U3Vic3lzdGVtLnNodXRkb3duKFNlbGZUZXN0U3Vic3lzdGVtLmphdmE6MTg4Nik8 L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQgY29tLm5l dHNjYXBlLmNtc2NvcmUuYXBwcy5DTVNFbmdpbmUuc2h1dGRvd25TdWJzeXN0ZW1zKENNU0VuZ2lu ZS5qYXZhOjIxMTgpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9z cGFuPmF0IGNvbS5uZXRzY2FwZS5jbXNjb3JlLmFwcHMuQ01TRW5naW5lLnNodXRkb3duKENNU0Vu Z2luZS5qYXZhOjIwMTMpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4J PC9zcGFuPmF0IGNvbS5uZXRzY2FwZS5jZXJ0c3J2LmFwcHMuQ01TLnNodXRkb3duKENNUy5qYXZh OjIzNCk8L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQg Y29tLm5ldHNjYXBlLmNlcnRzcnYuYXBwcy5DTVMuc3RhcnQoQ01TLmphdmE6MTYzMCk8L2Rpdj48 ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQgY29tLm5ldHNjYXBl LmNtcy5zZXJ2bGV0LmJhc2UuQ01TU3RhcnRTZXJ2bGV0LmluaXQoQ01TU3RhcnRTZXJ2bGV0Lmph dmE6MTE0KTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5h dCBqYXZheC5zZXJ2bGV0LkdlbmVyaWNTZXJ2bGV0LmluaXQoR2VuZXJpY1NlcnZsZXQuamF2YTox NTgpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IG9y Zy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZGFyZFdyYXBwZXIuaW5pdFNlcnZsZXQoU3RhbmRh cmRXcmFwcGVyLmphdmE6MTIyNyk8L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpw cmUiPgk8L3NwYW4+YXQgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kYXJkV3JhcHBlci5s b2FkU2VydmxldChTdGFuZGFyZFdyYXBwZXIuamF2YToxMTQwKTwvZGl2PjxkaXY+PHNwYW4gc3R5 bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUu U3RhbmRhcmRXcmFwcGVyLmxvYWQoU3RhbmRhcmRXcmFwcGVyLmphdmE6MTAyNyk8L2Rpdj48ZGl2 PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQgb3JnLmFwYWNoZS5jYXRh bGluYS5jb3JlLlN0YW5kYXJkQ29udGV4dC5sb2FkT25TdGFydHVwKFN0YW5kYXJkQ29udGV4dC5q YXZhOjUwMzgpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFu PmF0IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZGFyZENvbnRleHQuc3RhcnRJbnRlcm5h bChTdGFuZGFyZENvbnRleHQuamF2YTo1MzQ4KTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRl LXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNhdGFsaW5hLnV0aWwuTGlmZWN5Y2xl QmFzZS5zdGFydChMaWZlY3ljbGVCYXNlLmphdmE6MTQ1KTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9 IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuQ29u dGFpbmVyQmFzZS5hZGRDaGlsZEludGVybmFsKENvbnRhaW5lckJhc2UuamF2YTo3NTMpPC9kaXY+ PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IG9yZy5hcGFjaGUu Y2F0YWxpbmEuY29yZS5Db250YWluZXJCYXNlLmFkZENoaWxkKENvbnRhaW5lckJhc2UuamF2YTo3 MjkpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IG9y Zy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZGFyZEhvc3QuYWRkQ2hpbGQoU3RhbmRhcmRIb3N0 LmphdmE6NzE3KTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bh bj5hdCBvcmcuYXBhY2hlLmNhdGFsaW5hLnN0YXJ0dXAuSG9zdENvbmZpZy5kZXBsb3lEZXNjcmlw dG9yKEhvc3RDb25maWcuamF2YTo2MjEpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3Bh Y2U6cHJlIj4JPC9zcGFuPmF0IG9yZy5hcGFjaGUuY2F0YWxpbmEuc3RhcnR1cC5Ib3N0Q29uZmln JERlcGxveURlc2NyaXB0b3IucnVuKEhvc3RDb25maWcuamF2YToxODM1KTwvZGl2PjxkaXY+PHNw YW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBqYXZhLnV0aWwuY29uY3VycmVu dC5FeGVjdXRvcnMkUnVubmFibGVBZGFwdGVyLmNhbGwoRXhlY3V0b3JzLmphdmE6NTExKTwvZGl2 PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBqYXZhLnV0aWwu Y29uY3VycmVudC5GdXR1cmVUYXNrLnJ1bihGdXR1cmVUYXNrLmphdmE6MjY2KTwvZGl2PjxkaXY+ PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBqYXZhLnV0aWwuY29uY3Vy cmVudC5UaHJlYWRQb29sRXhlY3V0b3IucnVuV29ya2VyKFRocmVhZFBvb2xFeGVjdXRvci5qYXZh OjExNDkpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0 IGphdmEudXRpbC5jb25jdXJyZW50LlRocmVhZFBvb2xFeGVjdXRvciRXb3JrZXIucnVuKFRocmVh ZFBvb2xFeGVjdXRvci5qYXZhOjYyNCk8L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFj ZTpwcmUiPgk8L3NwYW4+YXQgamF2YS5sYW5nLlRocmVhZC5ydW4oVGhyZWFkLmphdmE6NzQ4KTwv ZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+MTUtTm92LTIwMTcgMTI6MTQ6NTAuNTU4IFNFVkVSRSBb bG9jYWxob3N0LXN0YXJ0U3RvcC0xXSBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuU3RhbmRhcmRD b250ZXh0LmxvYWRPblN0YXJ0dXAgU2VydmxldCBbY2FzdGFydF0gaW4gd2ViIGFwcGxpY2F0aW9u IFsvY2FdIHRocmV3IGxvYWQoKSBleGNlcHRpb248L2Rpdj48ZGl2PsKgamF2YS5sYW5nLk51bGxQ b2ludGVyRXhjZXB0aW9uPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4J PC9zcGFuPmF0IGNvbS5uZXRzY2FwZS5jbXNjb3JlLnNlbGZ0ZXN0cy5TZWxmVGVzdFN1YnN5c3Rl bS5zaHV0ZG93bihTZWxmVGVzdFN1YnN5c3RlbS5qYXZhOjE4ODYpPC9kaXY+PGRpdj48c3BhbiBz dHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IGNvbS5uZXRzY2FwZS5jbXNjb3JlLmFw cHMuQ01TRW5naW5lLnNodXRkb3duU3Vic3lzdGVtcyhDTVNFbmdpbmUuamF2YToyMTE4KTwvZGl2 PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBjb20ubmV0c2Nh cGUuY21zY29yZS5hcHBzLkNNU0VuZ2luZS5zaHV0ZG93bihDTVNFbmdpbmUuamF2YToyMDEzKTwv ZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBjb20ubmV0 c2NhcGUuY2VydHNydi5hcHBzLkNNUy5zaHV0ZG93bihDTVMuamF2YToyMzQpPC9kaXY+PGRpdj48 c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IGNvbS5uZXRzY2FwZS5jZXJ0 c3J2LmFwcHMuQ01TLnN0YXJ0KENNUy5qYXZhOjE2MzApPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0i d2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IGNvbS5uZXRzY2FwZS5jbXMuc2VydmxldC5iYXNl LkNNU1N0YXJ0U2VydmxldC5pbml0KENNU1N0YXJ0U2VydmxldC5qYXZhOjExNCk8L2Rpdj48ZGl2 PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQgamF2YXguc2VydmxldC5H ZW5lcmljU2VydmxldC5pbml0KEdlbmVyaWNTZXJ2bGV0LmphdmE6MTU4KTwvZGl2PjxkaXY+PHNw YW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNhdGFsaW5h LmNvcmUuU3RhbmRhcmRXcmFwcGVyLmluaXRTZXJ2bGV0KFN0YW5kYXJkV3JhcHBlci5qYXZhOjEy MjcpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IG9y Zy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZGFyZFdyYXBwZXIubG9hZFNlcnZsZXQoU3RhbmRh cmRXcmFwcGVyLmphdmE6MTE0MCk8L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpw cmUiPgk8L3NwYW4+YXQgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kYXJkV3JhcHBlci5s b2FkKFN0YW5kYXJkV3JhcHBlci5qYXZhOjEwMjcpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hp dGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZGFy ZENvbnRleHQubG9hZE9uU3RhcnR1cChTdGFuZGFyZENvbnRleHQuamF2YTo1MDM4KTwvZGl2Pjxk aXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNh dGFsaW5hLmNvcmUuU3RhbmRhcmRDb250ZXh0LnN0YXJ0SW50ZXJuYWwoU3RhbmRhcmRDb250ZXh0 LmphdmE6NTM0OCk8L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3Nw YW4+YXQgb3JnLmFwYWNoZS5jYXRhbGluYS51dGlsLkxpZmVjeWNsZUJhc2Uuc3RhcnQoTGlmZWN5 Y2xlQmFzZS5qYXZhOjE0NSk8L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUi Pgk8L3NwYW4+YXQgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLkNvbnRhaW5lckJhc2UuYWRkQ2hp bGRJbnRlcm5hbChDb250YWluZXJCYXNlLmphdmE6NzUzKTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9 IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuQ29u dGFpbmVyQmFzZS5hZGRDaGlsZChDb250YWluZXJCYXNlLmphdmE6NzI5KTwvZGl2PjxkaXY+PHNw YW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNhdGFsaW5h LmNvcmUuU3RhbmRhcmRIb3N0LmFkZENoaWxkKFN0YW5kYXJkSG9zdC5qYXZhOjcxNyk8L2Rpdj48 ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQgb3JnLmFwYWNoZS5j YXRhbGluYS5zdGFydHVwLkhvc3RDb25maWcuZGVwbG95RGVzY3JpcHRvcihIb3N0Q29uZmlnLmph dmE6NjIxKTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5h dCBvcmcuYXBhY2hlLmNhdGFsaW5hLnN0YXJ0dXAuSG9zdENvbmZpZyREZXBsb3lEZXNjcmlwdG9y LnJ1bihIb3N0Q29uZmlnLmphdmE6MTgzNSk8L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1z cGFjZTpwcmUiPgk8L3NwYW4+YXQgamF2YS51dGlsLmNvbmN1cnJlbnQuRXhlY3V0b3JzJFJ1bm5h YmxlQWRhcHRlci5jYWxsKEV4ZWN1dG9ycy5qYXZhOjUxMSk8L2Rpdj48ZGl2PjxzcGFuIHN0eWxl PSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQgamF2YS51dGlsLmNvbmN1cnJlbnQuRnV0dXJl VGFzay5ydW4oRnV0dXJlVGFzay5qYXZhOjI2Nik8L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0 ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQgamF2YS51dGlsLmNvbmN1cnJlbnQuVGhyZWFkUG9vbEV4 ZWN1dG9yLnJ1bldvcmtlcihUaHJlYWRQb29sRXhlY3V0b3IuamF2YToxMTQ5KTwvZGl2PjxkaXY+ PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBqYXZhLnV0aWwuY29uY3Vy cmVudC5UaHJlYWRQb29sRXhlY3V0b3IkV29ya2VyLnJ1bihUaHJlYWRQb29sRXhlY3V0b3IuamF2 YTo2MjQpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0 IGphdmEubGFuZy5UaHJlYWQucnVuKFRocmVhZC5qYXZhOjc0OCk8L2Rpdj48ZGl2Pjxicj48L2Rp dj48ZGl2PjE1LU5vdi0yMDE3IDEyOjE0OjU0LjUwOSBTRVZFUkUgW2h0dHAtYmlvLTg0NDMtZXhl Yy0xXSBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuU3RhbmRhcmRIb3N0VmFsdmUuaW52b2tlIEV4 Y2VwdGlvbiBQcm9jZXNzaW5nIC9jYS9yZXN0L2FjY291bnQvbG9naW48L2Rpdj48ZGl2PsKgamF2 YXgud3MucnMuU2VydmljZVVuYXZhaWxhYmxlRXhjZXB0aW9uOiBTdWJzeXN0ZW0gdW5hdmFpbGFi bGU8L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQgY29t Lm5ldHNjYXBlLmNtcy50b21jYXQuUHJveHlSZWFsbS5maW5kU2VjdXJpdHlDb25zdHJhaW50cyhQ cm94eVJlYWxtLmphdmE6MTM4KTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnBy ZSI+CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNhdGFsaW5hLmF1dGhlbnRpY2F0b3IuQXV0aGVudGlj YXRvckJhc2UuaW52b2tlKEF1dGhlbnRpY2F0b3JCYXNlLmphdmE6NDk4KTwvZGl2PjxkaXY+PHNw YW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNhdGFsaW5h LmNvcmUuU3RhbmRhcmRIb3N0VmFsdmUuaW52b2tlKFN0YW5kYXJkSG9zdFZhbHZlLmphdmE6MTQx KTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBvcmcu YXBhY2hlLmNhdGFsaW5hLnZhbHZlcy5FcnJvclJlcG9ydFZhbHZlLmludm9rZShFcnJvclJlcG9y dFZhbHZlLmphdmE6NzkpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4J PC9zcGFuPmF0IG9yZy5hcGFjaGUuY2F0YWxpbmEudmFsdmVzLkFic3RyYWN0QWNjZXNzTG9nVmFs dmUuaW52b2tlKEFic3RyYWN0QWNjZXNzTG9nVmFsdmUuamF2YTo2MjApPC9kaXY+PGRpdj48c3Bh biBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IG9yZy5hcGFjaGUuY2F0YWxpbmEu Y29yZS5TdGFuZGFyZEVuZ2luZVZhbHZlLmludm9rZShTdGFuZGFyZEVuZ2luZVZhbHZlLmphdmE6 ODgpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IG9y Zy5hcGFjaGUuY2F0YWxpbmEuY29ubmVjdG9yLkNveW90ZUFkYXB0ZXIuc2VydmljZShDb3lvdGVB ZGFwdGVyLmphdmE6NTAyKTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+ CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNveW90ZS5odHRwMTEuQWJzdHJhY3RIdHRwMTFQcm9jZXNz b3IucHJvY2VzcyhBYnN0cmFjdEh0dHAxMVByb2Nlc3Nvci5qYXZhOjExMzIpPC9kaXY+PGRpdj48 c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IG9yZy5hcGFjaGUuY295b3Rl LkFic3RyYWN0UHJvdG9jb2wkQWJzdHJhY3RDb25uZWN0aW9uSGFuZGxlci5wcm9jZXNzKEFic3Ry YWN0UHJvdG9jb2wuamF2YTo2ODQpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6 cHJlIj4JPC9zcGFuPmF0IG9yZy5hcGFjaGUudG9tY2F0LnV0aWwubmV0LkpJb0VuZHBvaW50JFNv Y2tldFByb2Nlc3Nvci5ydW4oSklvRW5kcG9pbnQuamF2YToyODMpPC9kaXY+PGRpdj48c3BhbiBz dHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IGphdmEudXRpbC5jb25jdXJyZW50LlRo cmVhZFBvb2xFeGVjdXRvci5ydW5Xb3JrZXIoVGhyZWFkUG9vbEV4ZWN1dG9yLmphdmE6MTE0OSk8 L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQgamF2YS51 dGlsLmNvbmN1cnJlbnQuVGhyZWFkUG9vbEV4ZWN1dG9yJFdvcmtlci5ydW4oVGhyZWFkUG9vbEV4 ZWN1dG9yLmphdmE6NjI0KTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+ CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLnRvbWNhdC51dGlsLnRocmVhZHMuVGFza1RocmVhZCRXcmFw cGluZ1J1bm5hYmxlLnJ1bihUYXNrVGhyZWFkLmphdmE6NjEpPC9kaXY+PGRpdj48c3BhbiBzdHls ZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IGphdmEubGFuZy5UaHJlYWQucnVuKFRocmVh ZC5qYXZhOjc0OCk8L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PjE1LU5vdi0yMDE3IDEzOjA1OjU1 Ljg3NCBTRVZFUkUgW2xvY2FsaG9zdC1zdGFydFN0b3AtMV0gb3JnLmFwYWNoZS5jYXRhbGluYS5j b3JlLkFwcGxpY2F0aW9uQ29udGV4dC5sb2cgU3RhbmRhcmRXcmFwcGVyLlRocm93YWJsZTwvZGl2 PjxkaXY+wqBqYXZhLmxhbmcuTnVsbFBvaW50ZXJFeGNlcHRpb248L2Rpdj48ZGl2PjxzcGFuIHN0 eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQgY29tLm5ldHNjYXBlLmNtc2NvcmUuc2Vs ZnRlc3RzLlNlbGZUZXN0U3Vic3lzdGVtLnNodXRkb3duKFNlbGZUZXN0U3Vic3lzdGVtLmphdmE6 MTg4Nik8L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQg Y29tLm5ldHNjYXBlLmNtc2NvcmUuYXBwcy5DTVNFbmdpbmUuc2h1dGRvd25TdWJzeXN0ZW1zKENN U0VuZ2luZS5qYXZhOjIxMTgpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJl Ij4JPC9zcGFuPmF0IGNvbS5uZXRzY2FwZS5jbXNjb3JlLmFwcHMuQ01TRW5naW5lLnNodXRkb3du KENNU0VuZ2luZS5qYXZhOjIwMTMpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6 cHJlIj4JPC9zcGFuPmF0IGNvbS5uZXRzY2FwZS5jZXJ0c3J2LmFwcHMuQ01TLnNodXRkb3duKENN Uy5qYXZhOjIzNCk8L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3Nw YW4+YXQgY29tLm5ldHNjYXBlLmNlcnRzcnYuYXBwcy5DTVMuc3RhcnQoQ01TLmphdmE6MTYzMCk8 L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQgY29tLm5l dHNjYXBlLmNtcy5zZXJ2bGV0LmJhc2UuQ01TU3RhcnRTZXJ2bGV0LmluaXQoQ01TU3RhcnRTZXJ2 bGV0LmphdmE6MTE0KTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwv c3Bhbj5hdCBqYXZheC5zZXJ2bGV0LkdlbmVyaWNTZXJ2bGV0LmluaXQoR2VuZXJpY1NlcnZsZXQu amF2YToxNTgpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFu PmF0IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZGFyZFdyYXBwZXIuaW5pdFNlcnZsZXQo U3RhbmRhcmRXcmFwcGVyLmphdmE6MTIyNyk8L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1z cGFjZTpwcmUiPgk8L3NwYW4+YXQgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kYXJkV3Jh cHBlci5sb2FkU2VydmxldChTdGFuZGFyZFdyYXBwZXIuamF2YToxMTQwKTwvZGl2PjxkaXY+PHNw YW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNhdGFsaW5h LmNvcmUuU3RhbmRhcmRXcmFwcGVyLmxvYWQoU3RhbmRhcmRXcmFwcGVyLmphdmE6MTAyNyk8L2Rp dj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQgb3JnLmFwYWNo ZS5jYXRhbGluYS5jb3JlLlN0YW5kYXJkQ29udGV4dC5sb2FkT25TdGFydHVwKFN0YW5kYXJkQ29u dGV4dC5qYXZhOjUwMzgpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4J PC9zcGFuPmF0IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZGFyZENvbnRleHQuc3RhcnRJ bnRlcm5hbChTdGFuZGFyZENvbnRleHQuamF2YTo1MzQ4KTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9 IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNhdGFsaW5hLnV0aWwuTGlm ZWN5Y2xlQmFzZS5zdGFydChMaWZlY3ljbGVCYXNlLmphdmE6MTQ1KTwvZGl2PjxkaXY+PHNwYW4g c3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNhdGFsaW5hLmNv cmUuQ29udGFpbmVyQmFzZS5hZGRDaGlsZEludGVybmFsKENvbnRhaW5lckJhc2UuamF2YTo3NTMp PC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IG9yZy5h cGFjaGUuY2F0YWxpbmEuY29yZS5Db250YWluZXJCYXNlLmFkZENoaWxkKENvbnRhaW5lckJhc2Uu amF2YTo3MjkpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFu PmF0IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZGFyZEhvc3QuYWRkQ2hpbGQoU3RhbmRh cmRIb3N0LmphdmE6NzE3KTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+ CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNhdGFsaW5hLnN0YXJ0dXAuSG9zdENvbmZpZy5kZXBsb3lE ZXNjcmlwdG9yKEhvc3RDb25maWcuamF2YTo2MjEpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hp dGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IG9yZy5hcGFjaGUuY2F0YWxpbmEuc3RhcnR1cC5Ib3N0 Q29uZmlnJERlcGxveURlc2NyaXB0b3IucnVuKEhvc3RDb25maWcuamF2YToxODM1KTwvZGl2Pjxk aXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBqYXZhLnV0aWwuY29u Y3VycmVudC5FeGVjdXRvcnMkUnVubmFibGVBZGFwdGVyLmNhbGwoRXhlY3V0b3JzLmphdmE6NTEx KTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBqYXZh LnV0aWwuY29uY3VycmVudC5GdXR1cmVUYXNrLnJ1bihGdXR1cmVUYXNrLmphdmE6MjY2KTwvZGl2 PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBqYXZhLnV0aWwu Y29uY3VycmVudC5UaHJlYWRQb29sRXhlY3V0b3IucnVuV29ya2VyKFRocmVhZFBvb2xFeGVjdXRv ci5qYXZhOjExNDkpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9z cGFuPmF0IGphdmEudXRpbC5jb25jdXJyZW50LlRocmVhZFBvb2xFeGVjdXRvciRXb3JrZXIucnVu KFRocmVhZFBvb2xFeGVjdXRvci5qYXZhOjYyNCk8L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0 ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQgamF2YS5sYW5nLlRocmVhZC5ydW4oVGhyZWFkLmphdmE6 NzQ4KTwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+MTUtTm92LTIwMTcgMTM6MDU6NTUuODc1IFNF VkVSRSBbbG9jYWxob3N0LXN0YXJ0U3RvcC0xXSBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuU3Rh bmRhcmRDb250ZXh0LmxvYWRPblN0YXJ0dXAgU2VydmxldCBbY2FzdGFydF0gaW4gd2ViIGFwcGxp Y2F0aW9uIFsvY2FdIHRocmV3IGxvYWQoKSBleGNlcHRpb248L2Rpdj48ZGl2PsKgamF2YS5sYW5n Lk51bGxQb2ludGVyRXhjZXB0aW9uPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6 cHJlIj4JPC9zcGFuPmF0IGNvbS5uZXRzY2FwZS5jbXNjb3JlLnNlbGZ0ZXN0cy5TZWxmVGVzdFN1 YnN5c3RlbS5zaHV0ZG93bihTZWxmVGVzdFN1YnN5c3RlbS5qYXZhOjE4ODYpPC9kaXY+PGRpdj48 c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IGNvbS5uZXRzY2FwZS5jbXNj b3JlLmFwcHMuQ01TRW5naW5lLnNodXRkb3duU3Vic3lzdGVtcyhDTVNFbmdpbmUuamF2YToyMTE4 KTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBjb20u bmV0c2NhcGUuY21zY29yZS5hcHBzLkNNU0VuZ2luZS5zaHV0ZG93bihDTVNFbmdpbmUuamF2YToy MDEzKTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBj b20ubmV0c2NhcGUuY2VydHNydi5hcHBzLkNNUy5zaHV0ZG93bihDTVMuamF2YToyMzQpPC9kaXY+ PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IGNvbS5uZXRzY2Fw ZS5jZXJ0c3J2LmFwcHMuQ01TLnN0YXJ0KENNUy5qYXZhOjE2MzApPC9kaXY+PGRpdj48c3BhbiBz dHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IGNvbS5uZXRzY2FwZS5jbXMuc2Vydmxl dC5iYXNlLkNNU1N0YXJ0U2VydmxldC5pbml0KENNU1N0YXJ0U2VydmxldC5qYXZhOjExNCk8L2Rp dj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQgamF2YXguc2Vy dmxldC5HZW5lcmljU2VydmxldC5pbml0KEdlbmVyaWNTZXJ2bGV0LmphdmE6MTU4KTwvZGl2Pjxk aXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNh dGFsaW5hLmNvcmUuU3RhbmRhcmRXcmFwcGVyLmluaXRTZXJ2bGV0KFN0YW5kYXJkV3JhcHBlci5q YXZhOjEyMjcpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFu PmF0IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZGFyZFdyYXBwZXIubG9hZFNlcnZsZXQo U3RhbmRhcmRXcmFwcGVyLmphdmE6MTE0MCk8L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1z cGFjZTpwcmUiPgk8L3NwYW4+YXQgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kYXJkV3Jh cHBlci5sb2FkKFN0YW5kYXJkV3JhcHBlci5qYXZhOjEwMjcpPC9kaXY+PGRpdj48c3BhbiBzdHls ZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5T dGFuZGFyZENvbnRleHQubG9hZE9uU3RhcnR1cChTdGFuZGFyZENvbnRleHQuamF2YTo1MDM4KTwv ZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBvcmcuYXBh Y2hlLmNhdGFsaW5hLmNvcmUuU3RhbmRhcmRDb250ZXh0LnN0YXJ0SW50ZXJuYWwoU3RhbmRhcmRD b250ZXh0LmphdmE6NTM0OCk8L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUi Pgk8L3NwYW4+YXQgb3JnLmFwYWNoZS5jYXRhbGluYS51dGlsLkxpZmVjeWNsZUJhc2Uuc3RhcnQo TGlmZWN5Y2xlQmFzZS5qYXZhOjE0NSk8L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFj ZTpwcmUiPgk8L3NwYW4+YXQgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLkNvbnRhaW5lckJhc2Uu YWRkQ2hpbGRJbnRlcm5hbChDb250YWluZXJCYXNlLmphdmE6NzUzKTwvZGl2PjxkaXY+PHNwYW4g c3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNhdGFsaW5hLmNv cmUuQ29udGFpbmVyQmFzZS5hZGRDaGlsZChDb250YWluZXJCYXNlLmphdmE6NzI5KTwvZGl2Pjxk aXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNh dGFsaW5hLmNvcmUuU3RhbmRhcmRIb3N0LmFkZENoaWxkKFN0YW5kYXJkSG9zdC5qYXZhOjcxNyk8 L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQgb3JnLmFw YWNoZS5jYXRhbGluYS5zdGFydHVwLkhvc3RDb25maWcuZGVwbG95RGVzY3JpcHRvcihIb3N0Q29u ZmlnLmphdmE6NjIxKTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwv c3Bhbj5hdCBvcmcuYXBhY2hlLmNhdGFsaW5hLnN0YXJ0dXAuSG9zdENvbmZpZyREZXBsb3lEZXNj cmlwdG9yLnJ1bihIb3N0Q29uZmlnLmphdmE6MTgzNSk8L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3 aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQgamF2YS51dGlsLmNvbmN1cnJlbnQuRXhlY3V0b3Jz JFJ1bm5hYmxlQWRhcHRlci5jYWxsKEV4ZWN1dG9ycy5qYXZhOjUxMSk8L2Rpdj48ZGl2PjxzcGFu IHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQgamF2YS51dGlsLmNvbmN1cnJlbnQu RnV0dXJlVGFzay5ydW4oRnV0dXJlVGFzay5qYXZhOjI2Nik8L2Rpdj48ZGl2PjxzcGFuIHN0eWxl PSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQgamF2YS51dGlsLmNvbmN1cnJlbnQuVGhyZWFk UG9vbEV4ZWN1dG9yLnJ1bldvcmtlcihUaHJlYWRQb29sRXhlY3V0b3IuamF2YToxMTQ5KTwvZGl2 PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBqYXZhLnV0aWwu Y29uY3VycmVudC5UaHJlYWRQb29sRXhlY3V0b3IkV29ya2VyLnJ1bihUaHJlYWRQb29sRXhlY3V0 b3IuamF2YTo2MjQpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9z cGFuPmF0IGphdmEubGFuZy5UaHJlYWQucnVuKFRocmVhZC5qYXZhOjc0OCk8L2Rpdj48ZGl2Pjxi cj48L2Rpdj48ZGl2PjE1LU5vdi0yMDE3IDEzOjA1OjU5LjcwNiBTRVZFUkUgW2h0dHAtYmlvLTg0 NDMtZXhlYy0xXSBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuU3RhbmRhcmRIb3N0VmFsdmUuaW52 b2tlIEV4Y2VwdGlvbiBQcm9jZXNzaW5nIC9jYS9yZXN0L2FjY291bnQvbG9naW48L2Rpdj48ZGl2 PsKgamF2YXgud3MucnMuU2VydmljZVVuYXZhaWxhYmxlRXhjZXB0aW9uOiBTdWJzeXN0ZW0gdW5h dmFpbGFibGU8L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+ YXQgY29tLm5ldHNjYXBlLmNtcy50b21jYXQuUHJveHlSZWFsbS5maW5kU2VjdXJpdHlDb25zdHJh aW50cyhQcm94eVJlYWxtLmphdmE6MTM4KTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNw YWNlOnByZSI+CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNhdGFsaW5hLmF1dGhlbnRpY2F0b3IuQXV0 aGVudGljYXRvckJhc2UuaW52b2tlKEF1dGhlbnRpY2F0b3JCYXNlLmphdmE6NDk4KTwvZGl2Pjxk aXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNh dGFsaW5hLmNvcmUuU3RhbmRhcmRIb3N0VmFsdmUuaW52b2tlKFN0YW5kYXJkSG9zdFZhbHZlLmph dmE6MTQxKTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOnByZSI+CTwvc3Bhbj5h dCBvcmcuYXBhY2hlLmNhdGFsaW5hLnZhbHZlcy5FcnJvclJlcG9ydFZhbHZlLmludm9rZShFcnJv clJlcG9ydFZhbHZlLmphdmE6NzkpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6 cHJlIj4JPC9zcGFuPmF0IG9yZy5hcGFjaGUuY2F0YWxpbmEudmFsdmVzLkFic3RyYWN0QWNjZXNz TG9nVmFsdmUuaW52b2tlKEFic3RyYWN0QWNjZXNzTG9nVmFsdmUuamF2YTo2MjApPC9kaXY+PGRp dj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IG9yZy5hcGFjaGUuY2F0 YWxpbmEuY29yZS5TdGFuZGFyZEVuZ2luZVZhbHZlLmludm9rZShTdGFuZGFyZEVuZ2luZVZhbHZl LmphdmE6ODgpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFu PmF0IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29ubmVjdG9yLkNveW90ZUFkYXB0ZXIuc2VydmljZShD b3lvdGVBZGFwdGVyLmphdmE6NTAyKTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNl OnByZSI+CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLmNveW90ZS5odHRwMTEuQWJzdHJhY3RIdHRwMTFQ cm9jZXNzb3IucHJvY2VzcyhBYnN0cmFjdEh0dHAxMVByb2Nlc3Nvci5qYXZhOjExMzIpPC9kaXY+ PGRpdj48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IG9yZy5hcGFjaGUu Y295b3RlLkFic3RyYWN0UHJvdG9jb2wkQWJzdHJhY3RDb25uZWN0aW9uSGFuZGxlci5wcm9jZXNz KEFic3RyYWN0UHJvdG9jb2wuamF2YTo2ODQpPC9kaXY+PGRpdj48c3BhbiBzdHlsZT0id2hpdGUt c3BhY2U6cHJlIj4JPC9zcGFuPmF0IG9yZy5hcGFjaGUudG9tY2F0LnV0aWwubmV0LkpJb0VuZHBv aW50JFNvY2tldFByb2Nlc3Nvci5ydW4oSklvRW5kcG9pbnQuamF2YToyODMpPC9kaXY+PGRpdj48 c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IGphdmEudXRpbC5jb25jdXJy ZW50LlRocmVhZFBvb2xFeGVjdXRvci5ydW5Xb3JrZXIoVGhyZWFkUG9vbEV4ZWN1dG9yLmphdmE6 MTE0OSk8L2Rpdj48ZGl2PjxzcGFuIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPgk8L3NwYW4+YXQg amF2YS51dGlsLmNvbmN1cnJlbnQuVGhyZWFkUG9vbEV4ZWN1dG9yJFdvcmtlci5ydW4oVGhyZWFk UG9vbEV4ZWN1dG9yLmphdmE6NjI0KTwvZGl2PjxkaXY+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNl OnByZSI+CTwvc3Bhbj5hdCBvcmcuYXBhY2hlLnRvbWNhdC51dGlsLnRocmVhZHMuVGFza1RocmVh ZCRXcmFwcGluZ1J1bm5hYmxlLnJ1bihUYXNrVGhyZWFkLmphdmE6NjEpPC9kaXY+PGRpdj48c3Bh biBzdHlsZT0id2hpdGUtc3BhY2U6cHJlIj4JPC9zcGFuPmF0IGphdmEubGFuZy5UaHJlYWQucnVu KFRocmVhZC5qYXZhOjc0OCk8L2Rpdj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48L2Rpdj48ZGl2IGNs YXNzPSJnbWFpbF9leHRyYSI+PGJyPjxkaXYgY2xhc3M9ImdtYWlsX3F1b3RlIj5PbiAxNSBOb3Zl bWJlciAyMDE3IGF0IDEzOjIzLCBEYXZpZCBIYXJ2ZXkgPHNwYW4gZGlyPSJsdHIiPiZsdDs8YSBo cmVmPSJtYWlsdG86ZGF2aWRjaGFydmV5QGdvb2dsZW1haWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+ ZGF2aWRjaGFydmV5QGdvb2dsZW1haWwuY29tPC9hPiZndDs8L3NwYW4+IHdyb3RlOjxicj48Ymxv Y2txdW90ZSBjbGFzcz0iZ21haWxfcXVvdGUiIHN0eWxlPSJtYXJnaW46MCAwIDAgLjhleDtib3Jk ZXItbGVmdDoxcHggI2NjYyBzb2xpZDtwYWRkaW5nLWxlZnQ6MWV4Ij48ZGl2IGRpcj0ibHRyIj48 ZGl2PkhpIHdpc2RvbSBvZiB0aGUgbGlzdCw8L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2Pkkga25v dyBJIGFtIGFuIGVkZ2UgY2FzZSB3aXRoIHJ1bm5pbmcgb24gdWJ1bnR1LCBidXQgaG9wZWQgc29t ZW9uZSBtaWdodCBiZSBhYmxlIHRvIHNoZWQgc29tZSBsaWdodC48L2Rpdj48ZGl2Pjxicj48L2Rp dj48ZGl2PkEgYml0IG9mIGJhY2tncm91bmQuwqAgSSYjMzk7bSB0cnlpbmcgdG8gdGVzdCB1cGdy YWRlcyB3aXRob3V0IHBvdGVudGlhbGx5IGhvc2luZyBteSBleGlzdGluZyBzZXJ2aWNlcywgc28g SSBoYXZlIGNsb25lZCB0aGUgVk0sIGdpdmVuIGl0IGEgbmV3IElQIGFkZHJlc3MsIHVwZGF0ZWQg aG9zdHMgZmlsZSBhbmQgcG9pbnRlZCBETlMgc29tZXdoZXJlIHRoYXQgZG9lc24mIzM5O3Qga25v dyBhYm91dCB0aGUgcmVhbCBJUEEgc2VydmljZXMgKDguOC44LjgpIHNvIGl0IHdvbiYjMzk7dCB0 cnkgYW5kIHN5bmMgb3IgcmVwbGljYXRlLjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+QXR0ZW1w dGluZyB0byB1cGdyYWRlIGhpdHMgYSBzbmFncyBvciB0d28sIHNvbWUgZGVzY3JpYmVkIGluIGJ1 Z3MgYWxyZWFkeSBsaWtlIHRoZSBwa2kgdmVyc2lvbiBudW1iZXIgY29uZnVzaW5nIHRoZSBhcHQg c2NyaXB0c8KgPGEgaHJlZj0iaHR0cHM6Ly9idWdzLmxhdW5jaHBhZC5uZXQvdWJ1bnR1Lytzb3Vy Y2UvZnJlZWlwYS8rYnVnLzE3MDMwNTEiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL2J1Z3MuPHdi cj5sYXVuY2hwYWQubmV0L3VidW50dS8rc291cmNlLzx3YnI+ZnJlZWlwYS8rYnVnLzE3MDMwNTE8 L2E+ICkuIFRoZSBvbmUgSSBjYW4mIzM5O3Qgd29yayBhcm91bmQgaG93ZXZlciBpcyBiZWxvdy48 L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2Pkl0IHNlZW1zIGRlZXBseSB1bmhhcHB5LCBhbmQgcmVz dGFydGluZyB0aGUgc2VydmljZXMgcmVzdWx0IGluIHRoZSBkb2d0YWctcGtpIHdlYiBwYWdlIGJl aW5nIGF2YWlsYWJsZSB1bnRpbCBhIGxvZ2luIGF0dGVtcHQgaXMgbWFkZSAoYXMgb2NjdXJzIGR1 cmluZyB0aGUgaXBhLXNlcnZlci11cGdyYWRlKSBhZnRlciB3aGljaCBwb2ludCBpdCBib21icyB3 aXRoIGEgNTAwIGVycm9yLjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+Q291bGQgdGhlIGJlbG93 IGNhdXNlZCBiecKgPGEgaHJlZj0iaHR0cHM6Ly9idWdzLmxhdW5jaHBhZC5uZXQvdWJ1bnR1Lytz b3VyY2UvZnJlZWlwYS8rYnVnLzE3MTY4NDIiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL2J1Z3Mu bGF1bmNocGFkLm5ldC88d2JyPnVidW50dS8rc291cmNlL2ZyZWVpcGEvK2J1Zy88d2JyPjE3MTY4 NDI8L2E+ID88YnI+PC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj5BbnkgYWR2aWNlIGFwcHJlY2lh dGVkLCBhcyBJIHRoaW5rIGV2ZW4gd2hlbiAxOC4wNCBoaXRzIHdpdGggdGhlIHByb3Bvc2VkIHVw ZGF0ZXMgdG8gcmVseSBvbiB0byB0b21jYXQgOC41LCBJJiMzOTtsbCBzdGlsbCBuZWVkIHRvIHVw Z3JhZGUgdmlhIDE3LjEwIHdoaWNoIHNlZW1zIGN1cnJlbnRseSBmcmF1Z2h0IcKgIElmIGl0IHJl bGF0ZXMgdG8gbXkgbWV0aG9kIG9mIGNsb25pbmcgdGhlIFZNLCBpcyB0aGVyZSBhIGJldHRlciB3 YXkgb2YgdGVzdGluZyB1cGdyYWRlcyB3aXRob3V0IHBvdGVudGlhbGx5IGhvc2luZyB0aGUgZXhp c3RpbmcgbGl2ZSBzeXN0ZW1zPzwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+PGJyPjwvZGl2Pjxk aXY+VGhhbmtzIGluIGFkdmFuY2UsPC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj5EYXZpZDwvZGl2 PjxkaXY+PGJyPjwvZGl2PjxkaXY+MjAxNy0xMS0xNVQxMzowNTo1OVogREVCVUcgYXBwcm92ZWRf dXNhZ2UgPSBTU0wgU2VydmVyIGludGVuZGVkX3VzYWdlID0gU1NMIFNlcnZlcjwvZGl2PjxkaXY+ MjAxNy0xMS0xNVQxMzowNTo1OVogREVCVUcgY2VydCB2YWxpZCBUcnVlIGZvciAmcXVvdDtDTj08 YSBocmVmPSJodHRwOi8vaXBhMS5teS5uZXQiIHRhcmdldD0iX2JsYW5rIj5pcGExLm15Lm5ldDwv YT4sTz08YSBocmVmPSJodHRwOi8vVEhPTUFDLk5FVCIgdGFyZ2V0PSJfYmxhbmsiPlRIT01BQy5O RVQ8L2E+JnF1b3Q7PC9kaXY+PGRpdj4yMDE3LTExLTE1VDEzOjA1OjU5WiBERUJVRyBoYW5kc2hh a2UgY29tcGxldGUsIHBlZXIgPSBJUEFERFJFU1M8L2Rpdj48ZGl2PjIwMTctMTEtMTVUMTM6MDU6 NTlaIERFQlVHIFByb3RvY29sOiBUTFMxLjI8L2Rpdj48ZGl2PjIwMTctMTEtMTVUMTM6MDU6NTla IERFQlVHIENpcGhlcjogVExTX1JTQV9XSVRIX0FFU18xMjhfQ0JDX1NIQTwvZGl2PjxkaXY+MjAx Ny0xMS0xNVQxMzowNTo1OVogREVCVUcgcmVzcG9uc2Ugc3RhdHVzIDUwMDwvZGl2PjxkaXY+MjAx Ny0xMS0xNVQxMzowNTo1OVogREVCVUcgcmVzcG9uc2UgaGVhZGVycyB7JiMzOTtjb250ZW50LWxl bmd0aCYjMzk7OiAmIzM5OzIyOTImIzM5OywgJiMzOTtjb250ZW50LWxhbmd1YWdlJiMzOTs6ICYj Mzk7ZW4mIzM5OywgJiMzOTtzZXJ2ZXImIzM5OzogJiMzOTtBcGFjaGUtQ295b3RlLzEuMSYjMzk7 LCAmIzM5O2Nvbm5lY3Rpb24mIzM5OzogJiMzOTtjbG9zZSYjMzk7LCAmIzM5O2RhdGUmIzM5Ozog JiMzOTtXZWQsIDE1IE5vdiAyMDE3IDEzOjA1OjU5IEdNVCYjMzk7LCAmIzM5O2NvbnRlbnQtdHlw ZSYjMzk7OiAmIzM5O3RleHQvaHRtbDtjaGFyc2V0PXV0Zi04JiMzOTt9PC9kaXY+PGRpdj4yMDE3 LTExLTE1VDEzOjA1OjU5WiBERUJVRyByZXNwb25zZSBib2R5ICYjMzk7Jmx0OyFET0NUWVBFIGh0 bWwmZ3Q7Jmx0O2h0bWwmZ3Q7Jmx0O2hlYWQmZ3Q7Jmx0O3RpdGxlJmd0O0FwYWNoZSBUb21jYXQv OC4wLjQ2IChVYnVudHUpIC0gRXJyb3IgcmVwb3J0Jmx0Oy90aXRsZSZndDsmbHQ7c3R5bGUgdHlw ZT0mcXVvdDt0ZXh0L2NzcyZxdW90OyZndDtIMSB7Zm9udC1mYW1pbHk6VGFob21hLEFyaWFsLDx3 YnI+c2Fucy1zZXJpZjtjb2xvcjp3aGl0ZTs8d2JyPmJhY2tncm91bmQtY29sb3I6IzUyNUQ3Njtm b250LTx3YnI+c2l6ZToyMnB4O30gSDIge2ZvbnQtZmFtaWx5OlRhaG9tYSxBcmlhbCw8d2JyPnNh bnMtc2VyaWY7Y29sb3I6d2hpdGU7PHdicj5iYWNrZ3JvdW5kLWNvbG9yOiM1MjVENzY7Zm9udC08 d2JyPnNpemU6MTZweDt9IEgzIHtmb250LWZhbWlseTpUYWhvbWEsQXJpYWwsPHdicj5zYW5zLXNl cmlmO2NvbG9yOndoaXRlOzx3YnI+YmFja2dyb3VuZC1jb2xvcjojNTI1RDc2O2ZvbnQtPHdicj5z aXplOjE0cHg7fSBCT0RZIHtmb250LWZhbWlseTpUYWhvbWEsQXJpYWwsPHdicj5zYW5zLXNlcmlm O2NvbG9yOmJsYWNrOzx3YnI+YmFja2dyb3VuZC1jb2xvcjp3aGl0ZTt9IEIge2ZvbnQtZmFtaWx5 OlRhaG9tYSxBcmlhbCw8d2JyPnNhbnMtc2VyaWY7Y29sb3I6d2hpdGU7PHdicj5iYWNrZ3JvdW5k LWNvbG9yOiM1MjVENzY7fSBQIHtmb250LWZhbWlseTpUYWhvbWEsQXJpYWwsPHdicj5zYW5zLXNl cmlmO2JhY2tncm91bmQ6d2hpdGU7PHdicj5jb2xvcjpibGFjaztmb250LXNpemU6MTJweDt9QSB7 Y29sb3IgOiBibGFjazt9QS5uYW1lIHtjb2xvciA6IGJsYWNrO30ubGluZSB7aGVpZ2h0OiAxcHg7 IGJhY2tncm91bmQtY29sb3I6ICM1MjVENzY7IGJvcmRlcjogbm9uZTt9Jmx0Oy9zdHlsZSZndDsg Jmx0Oy9oZWFkJmd0OyZsdDtib2R5Jmd0OyZsdDtoMSZndDtIVFRQIFN0YXR1cyA1MDAgLSBTdWJz eXN0ZW0gdW5hdmFpbGFibGUmbHQ7L2gxJmd0OyZsdDtkaXYgY2xhc3M9JnF1b3Q7bGluZSZxdW90 OyZndDsmbHQ7L2RpdiZndDsmbHQ7cCZndDsmbHQ7YiZndDt0eXBlJmx0Ozx3YnI+L2ImZ3Q7IEV4 Y2VwdGlvbiByZXBvcnQmbHQ7L3AmZ3Q7Jmx0O3AmZ3Q7Jmx0O2ImZ3Q7bWVzc2FnZSZsdDsvYiZn dDsgJmx0O3UmZ3Q7U3Vic3lzdGVtIHVuYXZhaWxhYmxlJmx0Oy91Jmd0OyZsdDsvcCZndDsmbHQ7 cCZndDsmbHQ7YiZndDs8d2JyPmRlc2NyaXB0aW9uJmx0Oy9iJmd0OyAmbHQ7dSZndDtUaGUgc2Vy dmVyIGVuY291bnRlcmVkIGFuIGludGVybmFsIGVycm9yIHRoYXQgcHJldmVudGVkIGl0IGZyb20g ZnVsZmlsbGluZyB0aGlzIHJlcXVlc3QuJmx0Oy91Jmd0OyZsdDsvcCZndDsmbHQ7cCZndDsmbHQ7 YiZndDs8d2JyPmV4Y2VwdGlvbiZsdDsvYiZndDsmbHQ7L3AmZ3Q7Jmx0O3ByZSZndDtqYXZheC48 d2JyPjxhIGhyZWY9Imh0dHA6Ly93cy5ycyI+d3MucnM8L2E+Ljx3YnI+U2VydmljZVVuYXZhaWxh YmxlRXhjZXB0aW9uOiBTdWJzeXN0ZW0gdW5hdmFpbGFibGVcblx0Y29tLm5ldHNjYXBlLjx3YnI+ Y21zLnRvbWNhdC5Qcm94eVJlYWxtLjx3YnI+ZmluZFNlY3VyaXR5Q29uc3RyYWludHMoPHdicj5Q cm94eVJlYWxtLmphdmE6MTM4KVxuXHRvcmcuPHdicj5hcGFjaGUuY2F0YWxpbmEuYXV0aGVudGlj YXRvci48d2JyPkF1dGhlbnRpY2F0b3JCYXNlLmludm9rZSg8d2JyPkF1dGhlbnRpY2F0b3JCYXNl LmphdmE6NDk4KVxuXDx3YnI+dG9yZy5hcGFjaGUuY2F0YWxpbmEudmFsdmVzLjx3YnI+RXJyb3JS ZXBvcnRWYWx2ZS5pbnZva2UoPHdicj5FcnJvclJlcG9ydFZhbHZlLmphdmE6NzkpXG5cPHdicj50 b3JnLmFwYWNoZS5jYXRhbGluYS52YWx2ZXMuPHdicj5BYnN0cmFjdEFjY2Vzc0xvZ1ZhbHZlLmlu dm9rZSg8d2JyPkFic3RyYWN0QWNjZXNzTG9nVmFsdmUuamF2YTo8d2JyPjYyMClcblx0b3JnLmFw YWNoZS5jYXRhbGluYS48d2JyPmNvbm5lY3Rvci5Db3lvdGVBZGFwdGVyLjx3YnI+c2VydmljZShD b3lvdGVBZGFwdGVyLmphdmE6PHdicj41MDIpXG5cdG9yZy5hcGFjaGUuY295b3RlLjx3YnI+aHR0 cDExLjx3YnI+QWJzdHJhY3RIdHRwMTFQcm9jZXNzb3IuPHdicj5wcm9jZXNzKDx3YnI+QWJzdHJh Y3RIdHRwMTFQcm9jZXNzb3IuamF2YTo8d2JyPjExMzIpXG5cdG9yZy5hcGFjaGUuY295b3RlLjx3 YnI+QWJzdHJhY3RQcm90b2NvbCQ8d2JyPkFic3RyYWN0Q29ubmVjdGlvbkhhbmRsZXIuPHdicj5w cm9jZXNzKEFic3RyYWN0UHJvdG9jb2wuamF2YTo8d2JyPjY4NClcblx0b3JnLmFwYWNoZS50b21j YXQuPHdicj51dGlsLm5ldC5KSW9FbmRwb2ludCQ8d2JyPlNvY2tldFByb2Nlc3Nvci5ydW4oPHdi cj5KSW9FbmRwb2ludC5qYXZhOjI4Mylcblx0amF2YS48d2JyPnV0aWwuY29uY3VycmVudC48d2Jy PlRocmVhZFBvb2xFeGVjdXRvci5ydW5Xb3JrZXIoPHdicj5UaHJlYWRQb29sRXhlY3V0b3IuamF2 YToxMTQ5KVw8d2JyPm5cdGphdmEudXRpbC5jb25jdXJyZW50Ljx3YnI+VGhyZWFkUG9vbEV4ZWN1 dG9yJFdvcmtlci5ydW4oPHdicj5UaHJlYWRQb29sRXhlY3V0b3IuamF2YTo2MjQpXDx3YnI+blx0 b3JnLmFwYWNoZS50b21jYXQudXRpbC48d2JyPnRocmVhZHMuVGFza1RocmVhZCQ8d2JyPldyYXBw aW5nUnVubmFibGUucnVuKDx3YnI+VGFza1RocmVhZC5qYXZhOjYxKVxuXHRqYXZhLjx3YnI+bGFu Zy5UaHJlYWQucnVuKFRocmVhZC5qYXZhOjx3YnI+NzQ4KVxuJmx0Oy9wcmUmZ3Q7Jmx0O3AmZ3Q7 Jmx0O2ImZ3Q7bm90ZSZsdDsvYiZndDsgJmx0O3UmZ3Q7VGhlIGZ1bGwgc3RhY2sgdHJhY2Ugb2Yg dGhlIHJvb3QgY2F1c2UgaXMgYXZhaWxhYmxlIGluIHRoZSBBcGFjaGUgVG9tY2F0LzguMC40NiAo VWJ1bnR1KSBsb2dzLiZsdDsvdSZndDsmbHQ7L3AmZ3Q7Jmx0O2hyIGNsYXNzPSZxdW90O2xpbmUm cXVvdDsmZ3Q7Jmx0O2gzJmd0O0FwYWNoZSBUb21jYXQvOC4wLjQ2IChVYnVudHUpJmx0Oy9oMyZn dDsmbHQ7L2JvZHkmZ3Q7Jmx0Oy9odG1sJmd0OyYjMzk7PC9kaXY+PGRpdj4yMDE3LTExLTE1VDEz OjA1OjU5WiBFUlJPUiBJUEEgc2VydmVyIHVwZ3JhZGUgZmFpbGVkOiBJbnNwZWN0IC92YXIvbG9n L2lwYXVwZ3JhZGUubG9nIGFuZCBydW4gY29tbWFuZCBpcGEtc2VydmVyLXVwZ3JhZGUgbWFudWFs bHkuPC9kaXY+PGRpdj4yMDE3LTExLTE1VDEzOjA1OjU5WiBERUJVR8KgIMKgRmlsZSAmcXVvdDsv dXNyL2xpYi9weXRob24yLjcvZGlzdC08d2JyPnBhY2thZ2VzL2lwYXB5dGhvbi9hZG1pbnRvb2wu PHdicj5weSZxdW90OywgbGluZSAxNzIsIGluIGV4ZWN1dGU8L2Rpdj48ZGl2PsKgIMKgIHJldHVy bl92YWx1ZSA9IHNlbGYucnVuKCk8L2Rpdj48ZGl2PsKgIEZpbGUgJnF1b3Q7L3Vzci9saWIvcHl0 aG9uMi43L2Rpc3QtPHdicj5wYWNrYWdlcy9pcGFzZXJ2ZXIvaW5zdGFsbC88d2JyPmlwYV9zZXJ2 ZXJfdXBncmFkZS5weSZxdW90OywgbGluZSA0NiwgaW4gcnVuPC9kaXY+PGRpdj7CoCDCoCBzZXJ2 ZXIudXBncmFkZSgpPC9kaXY+PGRpdj7CoCBGaWxlICZxdW90Oy91c3IvbGliL3B5dGhvbjIuNy9k aXN0LTx3YnI+cGFja2FnZXMvaXBhc2VydmVyL2luc3RhbGwvPHdicj5zZXJ2ZXIvdXBncmFkZS5w eSZxdW90OywgbGluZSAxODc4LCBpbiB1cGdyYWRlPC9kaXY+PGRpdj7CoCDCoCB1cGdyYWRlX2Nv bmZpZ3VyYXRpb24oKTwvZGl2PjxkaXY+wqAgRmlsZSAmcXVvdDsvdXNyL2xpYi9weXRob24yLjcv ZGlzdC08d2JyPnBhY2thZ2VzL2lwYXNlcnZlci9pbnN0YWxsLzx3YnI+c2VydmVyL3VwZ3JhZGUu cHkmcXVvdDssIGxpbmUgMTc5NywgaW4gdXBncmFkZV9jb25maWd1cmF0aW9uPC9kaXY+PGRpdj7C oCDCoCBjYV9lbmFibGVfbGRhcF9wcm9maWxlXzx3YnI+c3Vic3lzdGVtKGNhKTwvZGl2PjxkaXY+ wqAgRmlsZSAmcXVvdDsvdXNyL2xpYi9weXRob24yLjcvZGlzdC08d2JyPnBhY2thZ2VzL2lwYXNl cnZlci9pbnN0YWxsLzx3YnI+c2VydmVyL3VwZ3JhZGUucHkmcXVvdDssIGxpbmUgMzQ3LCBpbiBj YV9lbmFibGVfbGRhcF9wcm9maWxlXzx3YnI+c3Vic3lzdGVtPC9kaXY+PGRpdj7CoCDCoCBjYWlu c3RhbmNlLm1pZ3JhdGVfcHJvZmlsZXNfPHdicj50b19sZGFwKCk8L2Rpdj48ZGl2PsKgIEZpbGUg JnF1b3Q7L3Vzci9saWIvcHl0aG9uMi43L2Rpc3QtPHdicj5wYWNrYWdlcy9pcGFzZXJ2ZXIvaW5z dGFsbC88d2JyPmNhaW5zdGFuY2UucHkmcXVvdDssIGxpbmUgMTk4MSwgaW4gbWlncmF0ZV9wcm9m aWxlc190b19sZGFwPC9kaXY+PGRpdj7CoCDCoCBfY3JlYXRlX2RvZ3RhZ19wcm9maWxlKDx3YnI+ cHJvZmlsZV9pZCwgcHJvZmlsZV9kYXRhLCBvdmVyd3JpdGU9RmFsc2UpPC9kaXY+PGRpdj7CoCBG aWxlICZxdW90Oy91c3IvbGliL3B5dGhvbjIuNy9kaXN0LTx3YnI+cGFja2FnZXMvaXBhc2VydmVy L2luc3RhbGwvPHdicj5jYWluc3RhbmNlLnB5JnF1b3Q7LCBsaW5lIDE5ODcsIGluIF9jcmVhdGVf ZG9ndGFnX3Byb2ZpbGU8L2Rpdj48ZGl2PsKgIMKgIHdpdGggYXBpLkJhY2tlbmQucmFfY2VydHBy b2ZpbGUgYXMgcHJvZmlsZV9hcGk6PC9kaXY+PGRpdj7CoCBGaWxlICZxdW90Oy91c3IvbGliL3B5 dGhvbjIuNy9kaXN0LTx3YnI+cGFja2FnZXMvaXBhc2VydmVyL3BsdWdpbnMvPHdicj5kb2d0YWcu cHkmcXVvdDssIGxpbmUgMTI5NCwgaW4gX19lbnRlcl9fPC9kaXY+PGRpdj7CoCDCoCByYWlzZSBl cnJvcnMuUmVtb3RlUmV0cmlldmVFcnJvcig8d2JyPnJlYXNvbj1fKCYjMzk7RmFpbGVkIHRvIGF1 dGhlbnRpY2F0ZSB0byBDQSBSRVNUIEFQSSYjMzk7KSk8L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2 PjIwMTctMTEtMTVUMTM6MDU6NTlaIERFQlVHIFRoZSBpcGEtc2VydmVyLXVwZ3JhZGUgY29tbWFu ZCBmYWlsZWQsIGV4Y2VwdGlvbjogUmVtb3RlUmV0cmlldmVFcnJvcjogRmFpbGVkIHRvIGF1dGhl bnRpY2F0ZSB0byBDQSBSRVNUIEFQSTwvZGl2PjxkaXY+MjAxNy0xMS0xNVQxMzowNTo1OVogRVJS T1IgVW5leHBlY3RlZCBlcnJvciAtIHNlZSAvdmFyL2xvZy9pcGF1cGdyYWRlLmxvZyBmb3IgZGV0 YWlsczo8L2Rpdj48ZGl2PlJlbW90ZVJldHJpZXZlRXJyb3I6IEZhaWxlZCB0byBhdXRoZW50aWNh dGUgdG8gQ0EgUkVTVCBBUEk8L2Rpdj48ZGl2Pjxicj48L2Rpdj48L2Rpdj4KPC9ibG9ja3F1b3Rl PjwvZGl2Pjxicj48L2Rpdj4K --===============2637993149002811310==-- From simon.williams at thehelpfulcat.com Wed Nov 15 13:34:50 2017 Content-Type: multipart/mixed; boundary="===============6967138903580624819==" MIME-Version: 1.0 From: Simon Williams To: freeipa-users at lists.fedorahosted.org Subject: [Freeipa-users] Re: upgrade to ubuntu 17.10 fails Date: Wed, 15 Nov 2017 13:33:56 +0000 Message-ID: In-Reply-To: CADq_JGqur3Nh+sQpRxMptLb-B+qLmy4WQv+ZZ2LsFH-ukZo=sg@mail.gmail.com --===============6967138903580624819== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable There may be a million and one reasons not to do it this way, but have you considered building a new VM on 17.10 and replicating from the existing server? I have just tried to upgrade a development environment (IPA client) to 17.10 and had endless issues. I ended up creating a new machine and copying across my files which was considerably quicker. The upgrade to 17.10, particularly for machines that started out life on 16.04, appears to be fraut with problems even without having to deal with FreeIPA updates! On Wed, 15 Nov 2017, 13:24 David Harvey via FreeIPA-users, < freeipa-users(a)lists.fedorahosted.org> wrote: > Hi wisdom of the list, > > I know I am an edge case with running on ubuntu, but hoped someone might > be able to shed some light. > > A bit of background. I'm trying to test upgrades without potentially > hosing my existing services, so I have cloned the VM, given it a new IP > address, updated hosts file and pointed DNS somewhere that doesn't know > about the real IPA services (8.8.8.8) so it won't try and sync or replica= te. > > Attempting to upgrade hits a snags or two, some described in bugs already > like the pki version number confusing the apt scripts > https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1703051 ). The one > I can't work around however is below. > > It seems deeply unhappy, and restarting the services result in the > dogtag-pki web page being available until a login attempt is made (as > occurs during the ipa-server-upgrade) after which point it bombs with a 5= 00 > error. > > Could the below caused by > https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1716842 ? > > Any advice appreciated, as I think even when 18.04 hits with the proposed > updates to rely on to tomcat 8.5, I'll still need to upgrade via 17.10 > which seems currently fraught! If it relates to my method of cloning the > VM, is there a better way of testing upgrades without potentially hosing > the existing live systems? > > > Thanks in advance, > > David > > 2017-11-15T13:05:59Z DEBUG approved_usage =3D SSL Server intended_usage = =3D > SSL Server > 2017-11-15T13:05:59Z DEBUG cert valid True for "CN=3Dipa1.my.net,O=3D > THOMAC.NET" > 2017-11-15T13:05:59Z DEBUG handshake complete, peer =3D IPADDRESS > 2017-11-15T13:05:59Z DEBUG Protocol: TLS1.2 > 2017-11-15T13:05:59Z DEBUG Cipher: TLS_RSA_WITH_AES_128_CBC_SHA > 2017-11-15T13:05:59Z DEBUG response status 500 > 2017-11-15T13:05:59Z DEBUG response headers {'content-length': '2292', > 'content-language': 'en', 'server': 'Apache-Coyote/1.1', 'connection': > 'close', 'date': 'Wed, 15 Nov 2017 13:05:59 GMT', 'content-type': > 'text/html;charset=3Dutf-8'} > 2017-11-15T13:05:59Z DEBUG response body ' html>Apache Tomcat/8.0.46 (Ubuntu) - Error > report

HTTP > Status 500 - Subsystem unavailable

class=3D"line">

type Exception report

message > Subsystem unavailable

description The server > encountered an internal error that prevented it from fulfilling this > request.

exception

javax.ws.rs.ServiceUnavailabl=
eException:
> Subsystem
> unavailable\n\tcom.netscape.cms.tomcat.ProxyRealm.findSecurityConstraints=
(ProxyRealm.java:138)\n\torg.apache.catalina.authenticator.AuthenticatorBas=
e.invoke(AuthenticatorBase.java:498)\n\torg.apache.catalina.valves.ErrorRep=
ortValve.invoke(ErrorReportValve.java:79)\n\torg.apache.catalina.valves.Abs=
tractAccessLogValve.invoke(AbstractAccessLogValve.java:620)\n\torg.apache.c=
atalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:502)\n\torg.apac=
he.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.ja=
va:1132)\n\torg.apache.coyote.AbstractProtocol$AbstractConnectionHandler.pr=
ocess(AbstractProtocol.java:684)\n\torg.apache.tomcat.util.net.JIoEndpoint$=
SocketProcessor.run(JIoEndpoint.java:283)\n\tjava.util.concurrent.ThreadPoo=
lExecutor.runWorker(ThreadPoolExecutor.java:1149)\n\tjava.util.concurrent.T=
hreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)\n\torg.apache.tom=
cat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)\n\tjav=
a.lang.Thread.run(Thread.java:748)\n

note > The full stack trace of the root cause is available in the Apache > Tomcat/8.0.46 (Ubuntu) logs.

Apache > Tomcat/8.0.46 (Ubuntu)

' > 2017-11-15T13:05:59Z ERROR IPA server upgrade failed: Inspect > /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. > 2017-11-15T13:05:59Z DEBUG File > "/usr/lib/python2.7/dist-packages/ipapython/admintool.py", line 172, in > execute > return_value =3D self.run() > File > "/usr/lib/python2.7/dist-packages/ipaserver/install/ipa_server_upgrade.py= ", > line 46, in run > server.upgrade() > File > "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py", > line 1878, in upgrade > upgrade_configuration() > File > "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py", > line 1797, in upgrade_configuration > ca_enable_ldap_profile_subsystem(ca) > File > "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py", > line 347, in ca_enable_ldap_profile_subsystem > cainstance.migrate_profiles_to_ldap() > File "/usr/lib/python2.7/dist-packages/ipaserver/install/cainstance.py", > line 1981, in migrate_profiles_to_ldap > _create_dogtag_profile(profile_id, profile_data, overwrite=3DFalse) > File "/usr/lib/python2.7/dist-packages/ipaserver/install/cainstance.py", > line 1987, in _create_dogtag_profile > with api.Backend.ra_certprofile as profile_api: > File "/usr/lib/python2.7/dist-packages/ipaserver/plugins/dogtag.py", > line 1294, in __enter__ > raise errors.RemoteRetrieveError(reason=3D_('Failed to authenticate to > CA REST API')) > > 2017-11-15T13:05:59Z DEBUG The ipa-server-upgrade command failed, > exception: RemoteRetrieveError: Failed to authenticate to CA REST API > 2017-11-15T13:05:59Z ERROR Unexpected error - see /var/log/ipaupgrade.log > for details: > RemoteRetrieveError: Failed to authenticate to CA REST API > > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.= org > --===============6967138903580624819== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PHAgZGlyPSJsdHIiPlRoZXJlIG1heSBiZSBhIG1pbGxpb24gYW5kIG9uZSByZWFzb25zIG5vdCB0 byBkbyBpdCB0aGlzIHdheSwgYnV0IGhhdmUgeW91IGNvbnNpZGVyZWQgYnVpbGRpbmcgYSBuZXcg Vk0gb24gMTcuMTAgYW5kIHJlcGxpY2F0aW5nIGZyb20gdGhlIGV4aXN0aW5nIHNlcnZlcj8gSSBo YXZlIGp1c3QgdHJpZWQgdG8gdXBncmFkZSBhIGRldmVsb3BtZW50IGVudmlyb25tZW50IChJUEEg Y2xpZW50KSB0byAxNy4xMCBhbmQgaGFkIGVuZGxlc3MgaXNzdWVzLiBJIGVuZGVkIHVwIGNyZWF0 aW5nIGEgbmV3IG1hY2hpbmUgYW5kIGNvcHlpbmcgYWNyb3NzIG15IGZpbGVzIHdoaWNoIHdhcyBj b25zaWRlcmFibHkgcXVpY2tlci4gPC9wPgo8cCBkaXI9Imx0ciI+VGhlIHVwZ3JhZGUgdG8gMTcu MTAsIHBhcnRpY3VsYXJseSBmb3IgbWFjaGluZXMgdGhhdCBzdGFydGVkIG91dCBsaWZlIG9uIDE2 LjA0LCBhcHBlYXJzIHRvIGJlIGZyYXV0IHdpdGggcHJvYmxlbXMgZXZlbiB3aXRob3V0IGhhdmlu ZyB0byBkZWFsIHdpdGggRnJlZUlQQSB1cGRhdGVzITwvcD4KPGJyPjxkaXYgY2xhc3M9ImdtYWls X3F1b3RlIj48ZGl2IGRpcj0ibHRyIj5PbiBXZWQsIDE1IE5vdiAyMDE3LCAxMzoyNCBEYXZpZCBI YXJ2ZXkgdmlhIEZyZWVJUEEtdXNlcnMsICZsdDs8YSBocmVmPSJtYWlsdG86ZnJlZWlwYS11c2Vy c0BsaXN0cy5mZWRvcmFob3N0ZWQub3JnIj5mcmVlaXBhLXVzZXJzQGxpc3RzLmZlZG9yYWhvc3Rl ZC5vcmc8L2E+Jmd0OyB3cm90ZTo8YnI+PC9kaXY+PGJsb2NrcXVvdGUgY2xhc3M9ImdtYWlsX3F1 b3RlIiBzdHlsZT0ibWFyZ2luOjAgMCAwIC44ZXg7Ym9yZGVyLWxlZnQ6MXB4ICNjY2Mgc29saWQ7 cGFkZGluZy1sZWZ0OjFleCI+PGRpdiBkaXI9Imx0ciI+PGRpdj5IaSB3aXNkb20gb2YgdGhlIGxp c3QsPC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj5JIGtub3cgSSBhbSBhbiBlZGdlIGNhc2Ugd2l0 aCBydW5uaW5nIG9uIHVidW50dSwgYnV0IGhvcGVkIHNvbWVvbmUgbWlnaHQgYmUgYWJsZSB0byBz aGVkIHNvbWUgbGlnaHQuPC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj5BIGJpdCBvZiBiYWNrZ3Jv dW5kLsKgIEkmIzM5O20gdHJ5aW5nIHRvIHRlc3QgdXBncmFkZXMgd2l0aG91dCBwb3RlbnRpYWxs eSBob3NpbmcgbXkgZXhpc3Rpbmcgc2VydmljZXMsIHNvIEkgaGF2ZSBjbG9uZWQgdGhlIFZNLCBn aXZlbiBpdCBhIG5ldyBJUCBhZGRyZXNzLCB1cGRhdGVkIGhvc3RzIGZpbGUgYW5kIHBvaW50ZWQg RE5TIHNvbWV3aGVyZSB0aGF0IGRvZXNuJiMzOTt0IGtub3cgYWJvdXQgdGhlIHJlYWwgSVBBIHNl cnZpY2VzICg4LjguOC44KSBzbyBpdCB3b24mIzM5O3QgdHJ5IGFuZCBzeW5jIG9yIHJlcGxpY2F0 ZS48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PkF0dGVtcHRpbmcgdG8gdXBncmFkZSBoaXRzIGEg c25hZ3Mgb3IgdHdvLCBzb21lIGRlc2NyaWJlZCBpbiBidWdzIGFscmVhZHkgbGlrZSB0aGUgcGtp IHZlcnNpb24gbnVtYmVyIGNvbmZ1c2luZyB0aGUgYXB0IHNjcmlwdHPCoDxhIGhyZWY9Imh0dHBz Oi8vYnVncy5sYXVuY2hwYWQubmV0L3VidW50dS8rc291cmNlL2ZyZWVpcGEvK2J1Zy8xNzAzMDUx IiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly9idWdzLmxhdW5jaHBhZC5uZXQvdWJ1bnR1Lytzb3Vy Y2UvZnJlZWlwYS8rYnVnLzE3MDMwNTE8L2E+ICkuIFRoZSBvbmUgSSBjYW4mIzM5O3Qgd29yayBh cm91bmQgaG93ZXZlciBpcyBiZWxvdy48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2Pkl0IHNlZW1z IGRlZXBseSB1bmhhcHB5LCBhbmQgcmVzdGFydGluZyB0aGUgc2VydmljZXMgcmVzdWx0IGluIHRo ZSBkb2d0YWctcGtpIHdlYiBwYWdlIGJlaW5nIGF2YWlsYWJsZSB1bnRpbCBhIGxvZ2luIGF0dGVt cHQgaXMgbWFkZSAoYXMgb2NjdXJzIGR1cmluZyB0aGUgaXBhLXNlcnZlci11cGdyYWRlKSBhZnRl ciB3aGljaCBwb2ludCBpdCBib21icyB3aXRoIGEgNTAwIGVycm9yLjwvZGl2PjxkaXY+PGJyPjwv ZGl2PjxkaXY+Q291bGQgdGhlIGJlbG93IGNhdXNlZCBiecKgPGEgaHJlZj0iaHR0cHM6Ly9idWdz LmxhdW5jaHBhZC5uZXQvdWJ1bnR1Lytzb3VyY2UvZnJlZWlwYS8rYnVnLzE3MTY4NDIiIHRhcmdl dD0iX2JsYW5rIj5odHRwczovL2J1Z3MubGF1bmNocGFkLm5ldC91YnVudHUvK3NvdXJjZS9mcmVl aXBhLytidWcvMTcxNjg0MjwvYT4gPzxicj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PkFueSBh ZHZpY2UgYXBwcmVjaWF0ZWQsIGFzIEkgdGhpbmsgZXZlbiB3aGVuIDE4LjA0IGhpdHMgd2l0aCB0 aGUgcHJvcG9zZWQgdXBkYXRlcyB0byByZWx5IG9uIHRvIHRvbWNhdCA4LjUsIEkmIzM5O2xsIHN0 aWxsIG5lZWQgdG8gdXBncmFkZSB2aWEgMTcuMTAgd2hpY2ggc2VlbXMgY3VycmVudGx5IGZyYXVn aHQhwqAgSWYgaXQgcmVsYXRlcyB0byBteSBtZXRob2Qgb2YgY2xvbmluZyB0aGUgVk0sIGlzIHRo ZXJlIGEgYmV0dGVyIHdheSBvZiB0ZXN0aW5nIHVwZ3JhZGVzIHdpdGhvdXQgcG90ZW50aWFsbHkg aG9zaW5nIHRoZSBleGlzdGluZyBsaXZlIHN5c3RlbXM/PC9kaXY+PGRpdj48YnI+PC9kaXY+PGRp dj48YnI+PC9kaXY+PGRpdj5UaGFua3MgaW4gYWR2YW5jZSw8L2Rpdj48ZGl2Pjxicj48L2Rpdj48 ZGl2PkRhdmlkPC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj4yMDE3LTExLTE1VDEzOjA1OjU5WiBE RUJVRyBhcHByb3ZlZF91c2FnZSA9IFNTTCBTZXJ2ZXIgaW50ZW5kZWRfdXNhZ2UgPSBTU0wgU2Vy dmVyPC9kaXY+PGRpdj4yMDE3LTExLTE1VDEzOjA1OjU5WiBERUJVRyBjZXJ0IHZhbGlkIFRydWUg Zm9yICZxdW90O0NOPTxhIGhyZWY9Imh0dHA6Ly9pcGExLm15Lm5ldCIgdGFyZ2V0PSJfYmxhbmsi PmlwYTEubXkubmV0PC9hPixPPTxhIGhyZWY9Imh0dHA6Ly9USE9NQUMuTkVUIiB0YXJnZXQ9Il9i bGFuayI+VEhPTUFDLk5FVDwvYT4mcXVvdDs8L2Rpdj48ZGl2PjIwMTctMTEtMTVUMTM6MDU6NTla IERFQlVHIGhhbmRzaGFrZSBjb21wbGV0ZSwgcGVlciA9IElQQUREUkVTUzwvZGl2PjxkaXY+MjAx Ny0xMS0xNVQxMzowNTo1OVogREVCVUcgUHJvdG9jb2w6IFRMUzEuMjwvZGl2PjxkaXY+MjAxNy0x MS0xNVQxMzowNTo1OVogREVCVUcgQ2lwaGVyOiBUTFNfUlNBX1dJVEhfQUVTXzEyOF9DQkNfU0hB PC9kaXY+PGRpdj4yMDE3LTExLTE1VDEzOjA1OjU5WiBERUJVRyByZXNwb25zZSBzdGF0dXMgNTAw PC9kaXY+PGRpdj4yMDE3LTExLTE1VDEzOjA1OjU5WiBERUJVRyByZXNwb25zZSBoZWFkZXJzIHsm IzM5O2NvbnRlbnQtbGVuZ3RoJiMzOTs6ICYjMzk7MjI5MiYjMzk7LCAmIzM5O2NvbnRlbnQtbGFu Z3VhZ2UmIzM5OzogJiMzOTtlbiYjMzk7LCAmIzM5O3NlcnZlciYjMzk7OiAmIzM5O0FwYWNoZS1D b3lvdGUvMS4xJiMzOTssICYjMzk7Y29ubmVjdGlvbiYjMzk7OiAmIzM5O2Nsb3NlJiMzOTssICYj Mzk7ZGF0ZSYjMzk7OiAmIzM5O1dlZCwgMTUgTm92IDIwMTcgMTM6MDU6NTkgR01UJiMzOTssICYj Mzk7Y29udGVudC10eXBlJiMzOTs6ICYjMzk7dGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgmIzM5O308 L2Rpdj48ZGl2PjIwMTctMTEtMTVUMTM6MDU6NTlaIERFQlVHIHJlc3BvbnNlIGJvZHkgJiMzOTsm bHQ7IURPQ1RZUEUgaHRtbCZndDsmbHQ7aHRtbCZndDsmbHQ7aGVhZCZndDsmbHQ7dGl0bGUmZ3Q7 QXBhY2hlIFRvbWNhdC84LjAuNDYgKFVidW50dSkgLSBFcnJvciByZXBvcnQmbHQ7L3RpdGxlJmd0 OyZsdDtzdHlsZSB0eXBlPSZxdW90O3RleHQvY3NzJnF1b3Q7Jmd0O0gxIHtmb250LWZhbWlseTpU YWhvbWEsQXJpYWwsc2Fucy1zZXJpZjtjb2xvcjp3aGl0ZTtiYWNrZ3JvdW5kLWNvbG9yOiM1MjVE NzY7Zm9udC1zaXplOjIycHg7fSBIMiB7Zm9udC1mYW1pbHk6VGFob21hLEFyaWFsLHNhbnMtc2Vy aWY7Y29sb3I6d2hpdGU7YmFja2dyb3VuZC1jb2xvcjojNTI1RDc2O2ZvbnQtc2l6ZToxNnB4O30g SDMge2ZvbnQtZmFtaWx5OlRhaG9tYSxBcmlhbCxzYW5zLXNlcmlmO2NvbG9yOndoaXRlO2JhY2tn cm91bmQtY29sb3I6IzUyNUQ3Njtmb250LXNpemU6MTRweDt9IEJPRFkge2ZvbnQtZmFtaWx5OlRh aG9tYSxBcmlhbCxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrO2JhY2tncm91bmQtY29sb3I6d2hpdGU7 fSBCIHtmb250LWZhbWlseTpUYWhvbWEsQXJpYWwsc2Fucy1zZXJpZjtjb2xvcjp3aGl0ZTtiYWNr Z3JvdW5kLWNvbG9yOiM1MjVENzY7fSBQIHtmb250LWZhbWlseTpUYWhvbWEsQXJpYWwsc2Fucy1z ZXJpZjtiYWNrZ3JvdW5kOndoaXRlO2NvbG9yOmJsYWNrO2ZvbnQtc2l6ZToxMnB4O31BIHtjb2xv ciA6IGJsYWNrO31BLm5hbWUge2NvbG9yIDogYmxhY2s7fS5saW5lIHtoZWlnaHQ6IDFweDsgYmFj a2dyb3VuZC1jb2xvcjogIzUyNUQ3NjsgYm9yZGVyOiBub25lO30mbHQ7L3N0eWxlJmd0OyAmbHQ7 L2hlYWQmZ3Q7Jmx0O2JvZHkmZ3Q7Jmx0O2gxJmd0O0hUVFAgU3RhdHVzIDUwMCAtIFN1YnN5c3Rl bSB1bmF2YWlsYWJsZSZsdDsvaDEmZ3Q7Jmx0O2RpdiBjbGFzcz0mcXVvdDtsaW5lJnF1b3Q7Jmd0 OyZsdDsvZGl2Jmd0OyZsdDtwJmd0OyZsdDtiJmd0O3R5cGUmbHQ7L2ImZ3Q7IEV4Y2VwdGlvbiBy ZXBvcnQmbHQ7L3AmZ3Q7Jmx0O3AmZ3Q7Jmx0O2ImZ3Q7bWVzc2FnZSZsdDsvYiZndDsgJmx0O3Um Z3Q7U3Vic3lzdGVtIHVuYXZhaWxhYmxlJmx0Oy91Jmd0OyZsdDsvcCZndDsmbHQ7cCZndDsmbHQ7 YiZndDtkZXNjcmlwdGlvbiZsdDsvYiZndDsgJmx0O3UmZ3Q7VGhlIHNlcnZlciBlbmNvdW50ZXJl ZCBhbiBpbnRlcm5hbCBlcnJvciB0aGF0IHByZXZlbnRlZCBpdCBmcm9tIGZ1bGZpbGxpbmcgdGhp cyByZXF1ZXN0LiZsdDsvdSZndDsmbHQ7L3AmZ3Q7Jmx0O3AmZ3Q7Jmx0O2ImZ3Q7ZXhjZXB0aW9u Jmx0Oy9iJmd0OyZsdDsvcCZndDsmbHQ7cHJlJmd0O2phdmF4LndzLnJzLlNlcnZpY2VVbmF2YWls YWJsZUV4Y2VwdGlvbjogU3Vic3lzdGVtIHVuYXZhaWxhYmxlXG5cdGNvbS5uZXRzY2FwZS5jbXMu dG9tY2F0LlByb3h5UmVhbG0uZmluZFNlY3VyaXR5Q29uc3RyYWludHMoUHJveHlSZWFsbS5qYXZh OjEzOClcblx0b3JnLmFwYWNoZS5jYXRhbGluYS5hdXRoZW50aWNhdG9yLkF1dGhlbnRpY2F0b3JC YXNlLmludm9rZShBdXRoZW50aWNhdG9yQmFzZS5qYXZhOjQ5OClcblx0b3JnLmFwYWNoZS5jYXRh bGluYS52YWx2ZXMuRXJyb3JSZXBvcnRWYWx2ZS5pbnZva2UoRXJyb3JSZXBvcnRWYWx2ZS5qYXZh Ojc5KVxuXHRvcmcuYXBhY2hlLmNhdGFsaW5hLnZhbHZlcy5BYnN0cmFjdEFjY2Vzc0xvZ1ZhbHZl Lmludm9rZShBYnN0cmFjdEFjY2Vzc0xvZ1ZhbHZlLmphdmE6NjIwKVxuXHRvcmcuYXBhY2hlLmNh dGFsaW5hLmNvbm5lY3Rvci5Db3lvdGVBZGFwdGVyLnNlcnZpY2UoQ295b3RlQWRhcHRlci5qYXZh OjUwMilcblx0b3JnLmFwYWNoZS5jb3lvdGUuaHR0cDExLkFic3RyYWN0SHR0cDExUHJvY2Vzc29y LnByb2Nlc3MoQWJzdHJhY3RIdHRwMTFQcm9jZXNzb3IuamF2YToxMTMyKVxuXHRvcmcuYXBhY2hl LmNveW90ZS5BYnN0cmFjdFByb3RvY29sJEFic3RyYWN0Q29ubmVjdGlvbkhhbmRsZXIucHJvY2Vz cyhBYnN0cmFjdFByb3RvY29sLmphdmE6Njg0KVxuXHRvcmcuYXBhY2hlLnRvbWNhdC51dGlsLm5l dC5KSW9FbmRwb2ludCRTb2NrZXRQcm9jZXNzb3IucnVuKEpJb0VuZHBvaW50LmphdmE6MjgzKVxu XHRqYXZhLnV0aWwuY29uY3VycmVudC5UaHJlYWRQb29sRXhlY3V0b3IucnVuV29ya2VyKFRocmVh ZFBvb2xFeGVjdXRvci5qYXZhOjExNDkpXG5cdGphdmEudXRpbC5jb25jdXJyZW50LlRocmVhZFBv b2xFeGVjdXRvciRXb3JrZXIucnVuKFRocmVhZFBvb2xFeGVjdXRvci5qYXZhOjYyNClcblx0b3Jn LmFwYWNoZS50b21jYXQudXRpbC50aHJlYWRzLlRhc2tUaHJlYWQkV3JhcHBpbmdSdW5uYWJsZS5y dW4oVGFza1RocmVhZC5qYXZhOjYxKVxuXHRqYXZhLmxhbmcuVGhyZWFkLnJ1bihUaHJlYWQuamF2 YTo3NDgpXG4mbHQ7L3ByZSZndDsmbHQ7cCZndDsmbHQ7YiZndDtub3RlJmx0Oy9iJmd0OyAmbHQ7 dSZndDtUaGUgZnVsbCBzdGFjayB0cmFjZSBvZiB0aGUgcm9vdCBjYXVzZSBpcyBhdmFpbGFibGUg aW4gdGhlIEFwYWNoZSBUb21jYXQvOC4wLjQ2IChVYnVudHUpIGxvZ3MuJmx0Oy91Jmd0OyZsdDsv cCZndDsmbHQ7aHIgY2xhc3M9JnF1b3Q7bGluZSZxdW90OyZndDsmbHQ7aDMmZ3Q7QXBhY2hlIFRv bWNhdC84LjAuNDYgKFVidW50dSkmbHQ7L2gzJmd0OyZsdDsvYm9keSZndDsmbHQ7L2h0bWwmZ3Q7 JiMzOTs8L2Rpdj48ZGl2PjIwMTctMTEtMTVUMTM6MDU6NTlaIEVSUk9SIElQQSBzZXJ2ZXIgdXBn cmFkZSBmYWlsZWQ6IEluc3BlY3QgL3Zhci9sb2cvaXBhdXBncmFkZS5sb2cgYW5kIHJ1biBjb21t YW5kIGlwYS1zZXJ2ZXItdXBncmFkZSBtYW51YWxseS48L2Rpdj48ZGl2PjIwMTctMTEtMTVUMTM6 MDU6NTlaIERFQlVHwqAgwqBGaWxlICZxdW90Oy91c3IvbGliL3B5dGhvbjIuNy9kaXN0LXBhY2th Z2VzL2lwYXB5dGhvbi9hZG1pbnRvb2wucHkmcXVvdDssIGxpbmUgMTcyLCBpbiBleGVjdXRlPC9k aXY+PGRpdj7CoCDCoCByZXR1cm5fdmFsdWUgPSBzZWxmLnJ1bigpPC9kaXY+PGRpdj7CoCBGaWxl ICZxdW90Oy91c3IvbGliL3B5dGhvbjIuNy9kaXN0LXBhY2thZ2VzL2lwYXNlcnZlci9pbnN0YWxs L2lwYV9zZXJ2ZXJfdXBncmFkZS5weSZxdW90OywgbGluZSA0NiwgaW4gcnVuPC9kaXY+PGRpdj7C oCDCoCBzZXJ2ZXIudXBncmFkZSgpPC9kaXY+PGRpdj7CoCBGaWxlICZxdW90Oy91c3IvbGliL3B5 dGhvbjIuNy9kaXN0LXBhY2thZ2VzL2lwYXNlcnZlci9pbnN0YWxsL3NlcnZlci91cGdyYWRlLnB5 JnF1b3Q7LCBsaW5lIDE4NzgsIGluIHVwZ3JhZGU8L2Rpdj48ZGl2PsKgIMKgIHVwZ3JhZGVfY29u ZmlndXJhdGlvbigpPC9kaXY+PGRpdj7CoCBGaWxlICZxdW90Oy91c3IvbGliL3B5dGhvbjIuNy9k aXN0LXBhY2thZ2VzL2lwYXNlcnZlci9pbnN0YWxsL3NlcnZlci91cGdyYWRlLnB5JnF1b3Q7LCBs aW5lIDE3OTcsIGluIHVwZ3JhZGVfY29uZmlndXJhdGlvbjwvZGl2PjxkaXY+wqAgwqAgY2FfZW5h YmxlX2xkYXBfcHJvZmlsZV9zdWJzeXN0ZW0oY2EpPC9kaXY+PGRpdj7CoCBGaWxlICZxdW90Oy91 c3IvbGliL3B5dGhvbjIuNy9kaXN0LXBhY2thZ2VzL2lwYXNlcnZlci9pbnN0YWxsL3NlcnZlci91 cGdyYWRlLnB5JnF1b3Q7LCBsaW5lIDM0NywgaW4gY2FfZW5hYmxlX2xkYXBfcHJvZmlsZV9zdWJz eXN0ZW08L2Rpdj48ZGl2PsKgIMKgIGNhaW5zdGFuY2UubWlncmF0ZV9wcm9maWxlc190b19sZGFw KCk8L2Rpdj48ZGl2PsKgIEZpbGUgJnF1b3Q7L3Vzci9saWIvcHl0aG9uMi43L2Rpc3QtcGFja2Fn ZXMvaXBhc2VydmVyL2luc3RhbGwvY2FpbnN0YW5jZS5weSZxdW90OywgbGluZSAxOTgxLCBpbiBt aWdyYXRlX3Byb2ZpbGVzX3RvX2xkYXA8L2Rpdj48ZGl2PsKgIMKgIF9jcmVhdGVfZG9ndGFnX3By b2ZpbGUocHJvZmlsZV9pZCwgcHJvZmlsZV9kYXRhLCBvdmVyd3JpdGU9RmFsc2UpPC9kaXY+PGRp dj7CoCBGaWxlICZxdW90Oy91c3IvbGliL3B5dGhvbjIuNy9kaXN0LXBhY2thZ2VzL2lwYXNlcnZl ci9pbnN0YWxsL2NhaW5zdGFuY2UucHkmcXVvdDssIGxpbmUgMTk4NywgaW4gX2NyZWF0ZV9kb2d0 YWdfcHJvZmlsZTwvZGl2PjxkaXY+wqAgwqAgd2l0aCBhcGkuQmFja2VuZC5yYV9jZXJ0cHJvZmls ZSBhcyBwcm9maWxlX2FwaTo8L2Rpdj48ZGl2PsKgIEZpbGUgJnF1b3Q7L3Vzci9saWIvcHl0aG9u Mi43L2Rpc3QtcGFja2FnZXMvaXBhc2VydmVyL3BsdWdpbnMvZG9ndGFnLnB5JnF1b3Q7LCBsaW5l IDEyOTQsIGluIF9fZW50ZXJfXzwvZGl2PjxkaXY+wqAgwqAgcmFpc2UgZXJyb3JzLlJlbW90ZVJl dHJpZXZlRXJyb3IocmVhc29uPV8oJiMzOTtGYWlsZWQgdG8gYXV0aGVudGljYXRlIHRvIENBIFJF U1QgQVBJJiMzOTspKTwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+MjAxNy0xMS0xNVQxMzowNTo1 OVogREVCVUcgVGhlIGlwYS1zZXJ2ZXItdXBncmFkZSBjb21tYW5kIGZhaWxlZCwgZXhjZXB0aW9u OiBSZW1vdGVSZXRyaWV2ZUVycm9yOiBGYWlsZWQgdG8gYXV0aGVudGljYXRlIHRvIENBIFJFU1Qg QVBJPC9kaXY+PGRpdj4yMDE3LTExLTE1VDEzOjA1OjU5WiBFUlJPUiBVbmV4cGVjdGVkIGVycm9y IC0gc2VlIC92YXIvbG9nL2lwYXVwZ3JhZGUubG9nIGZvciBkZXRhaWxzOjwvZGl2PjxkaXY+UmVt b3RlUmV0cmlldmVFcnJvcjogRmFpbGVkIHRvIGF1dGhlbnRpY2F0ZSB0byBDQSBSRVNUIEFQSTwv ZGl2PjxkaXY+PGJyPjwvZGl2PjwvZGl2PgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXzxicj4KRnJlZUlQQS11c2VycyBtYWlsaW5nIGxpc3QgLS0gPGEgaHJl Zj0ibWFpbHRvOmZyZWVpcGEtdXNlcnNAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZyIgdGFyZ2V0PSJf YmxhbmsiPmZyZWVpcGEtdXNlcnNAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZzwvYT48YnI+ClRvIHVu c3Vic2NyaWJlIHNlbmQgYW4gZW1haWwgdG8gPGEgaHJlZj0ibWFpbHRvOmZyZWVpcGEtdXNlcnMt bGVhdmVAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmZyZWVpcGEtdXNl cnMtbGVhdmVAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZzwvYT48YnI+CjwvYmxvY2txdW90ZT48L2Rp dj4K --===============6967138903580624819==-- From rcritten at redhat.com Wed Nov 15 14:35:06 2017 Content-Type: multipart/mixed; boundary="===============0645897047364931702==" MIME-Version: 1.0 From: Rob Crittenden To: freeipa-users at lists.fedorahosted.org Subject: [Freeipa-users] Re: upgrade to ubuntu 17.10 fails Date: Wed, 15 Nov 2017 09:34:21 -0500 Message-ID: <543211a4-fc11-ccbf-c5bb-d1c580fedb2b@redhat.com> In-Reply-To: CADq_JGqyPmB6MmN0gTv3oHppthk35Umy6avZVOnVMX0qfN=zvQ@mail.gmail.com --===============0645897047364931702== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable David Harvey via FreeIPA-users wrote: > Sorry for the dump size, but not sure if the below from > /var/log/pki/pki-tomcat/localhost.date.log helps: Looks like the selftests are failing. I'd check that your CA subsystem certificates are not expired, etc. rob > = > 15-Nov-2017 12:14:50.557 SEVERE [localhost-startStop-1] > org.apache.catalina.core.ApplicationContext.log StandardWrapper.Throwable > java.lang.NullPointerException > at > com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown(SelfTestSubsyst= em.java:1886) > at > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEngine.java:211= 8) > at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > at > com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartServlet.java:1= 14) > at javax.servlet.GenericServlet.init(GenericServlet.java:158) > at > org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java= :1227) > at > org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java= :1140) > at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:102= 7) > at > org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.ja= va:5038) > at > org.apache.catalina.core.StandardContext.startInternal(StandardContext.ja= va:5348) > at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) > at > org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.jav= a:753) > at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:729) > at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:717) > at > org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:6= 21) > at > org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.ja= va:1835) > at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) > at java.util.concurrent.FutureTask.run(FutureTask.java:266) > at > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java= :1149) > at > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.jav= a:624) > at java.lang.Thread.run(Thread.java:748) > = > 15-Nov-2017 12:14:50.558 SEVERE [localhost-startStop-1] > org.apache.catalina.core.StandardContext.loadOnStartup Servlet [castart] > in web application [/ca] threw load() exception > java.lang.NullPointerException > at > com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown(SelfTestSubsyst= em.java:1886) > at > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEngine.java:211= 8) > at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > at > com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartServlet.java:1= 14) > at javax.servlet.GenericServlet.init(GenericServlet.java:158) > at > org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java= :1227) > at > org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java= :1140) > at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:102= 7) > at > org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.ja= va:5038) > at > org.apache.catalina.core.StandardContext.startInternal(StandardContext.ja= va:5348) > at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) > at > org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.jav= a:753) > at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:729) > at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:717) > at > org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:6= 21) > at > org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.ja= va:1835) > at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) > at java.util.concurrent.FutureTask.run(FutureTask.java:266) > at > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java= :1149) > at > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.jav= a:624) > at java.lang.Thread.run(Thread.java:748) > = > 15-Nov-2017 12:14:54.509 SEVERE [http-bio-8443-exec-1] > org.apache.catalina.core.StandardHostValve.invoke Exception Processing > /ca/rest/account/login > javax.ws.rs.ServiceUnavailableException: Subsystem unavailable > at > com.netscape.cms.tomcat.ProxyRealm.findSecurityConstraints(ProxyRealm.jav= a:138) > at > org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorB= ase.java:498) > at > org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:= 141) > at > org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:= 79) > at > org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLo= gValve.java:620) > at > org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.j= ava:88) > at > org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:50= 2) > at > org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Pr= ocessor.java:1132) > at > org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(Abst= ractProtocol.java:684) > at > org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.ja= va:283) > at > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java= :1149) > at > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.jav= a:624) > at > org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread= .java:61) > at java.lang.Thread.run(Thread.java:748) > = > 15-Nov-2017 13:05:55.874 SEVERE [localhost-startStop-1] > org.apache.catalina.core.ApplicationContext.log StandardWrapper.Throwable > java.lang.NullPointerException > at > com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown(SelfTestSubsyst= em.java:1886) > at > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEngine.java:211= 8) > at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > at > com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartServlet.java:1= 14) > at javax.servlet.GenericServlet.init(GenericServlet.java:158) > at > org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java= :1227) > at > org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java= :1140) > at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:102= 7) > at > org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.ja= va:5038) > at > org.apache.catalina.core.StandardContext.startInternal(StandardContext.ja= va:5348) > at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) > at > org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.jav= a:753) > at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:729) > at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:717) > at > org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:6= 21) > at > org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.ja= va:1835) > at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) > at java.util.concurrent.FutureTask.run(FutureTask.java:266) > at > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java= :1149) > at > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.jav= a:624) > at java.lang.Thread.run(Thread.java:748) > = > 15-Nov-2017 13:05:55.875 SEVERE [localhost-startStop-1] > org.apache.catalina.core.StandardContext.loadOnStartup Servlet [castart] > in web application [/ca] threw load() exception > java.lang.NullPointerException > at > com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown(SelfTestSubsyst= em.java:1886) > at > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEngine.java:211= 8) > at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > at > com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartServlet.java:1= 14) > at javax.servlet.GenericServlet.init(GenericServlet.java:158) > at > org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java= :1227) > at > org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java= :1140) > at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:102= 7) > at > org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.ja= va:5038) > at > org.apache.catalina.core.StandardContext.startInternal(StandardContext.ja= va:5348) > at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) > at > org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.jav= a:753) > at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:729) > at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:717) > at > org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:6= 21) > at > org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.ja= va:1835) > at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) > at java.util.concurrent.FutureTask.run(FutureTask.java:266) > at > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java= :1149) > at > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.jav= a:624) > at java.lang.Thread.run(Thread.java:748) > = > 15-Nov-2017 13:05:59.706 SEVERE [http-bio-8443-exec-1] > org.apache.catalina.core.StandardHostValve.invoke Exception Processing > /ca/rest/account/login > javax.ws.rs.ServiceUnavailableException: Subsystem unavailable > at > com.netscape.cms.tomcat.ProxyRealm.findSecurityConstraints(ProxyRealm.jav= a:138) > at > org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorB= ase.java:498) > at > org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:= 141) > at > org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:= 79) > at > org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLo= gValve.java:620) > at > org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.j= ava:88) > at > org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:50= 2) > at > org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Pr= ocessor.java:1132) > at > org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(Abst= ractProtocol.java:684) > at > org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.ja= va:283) > at > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java= :1149) > at > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.jav= a:624) > at > org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread= .java:61) > at java.lang.Thread.run(Thread.java:748) > = > = > On 15 November 2017 at 13:23, David Harvey > wrote: > = > Hi wisdom of the list, > = > I know I am an edge case with running on ubuntu, but hoped someone > might be able to shed some light. > = > A bit of background. I'm trying to test upgrades without > potentially hosing my existing services, so I have cloned the VM, > given it a new IP address, updated hosts file and pointed DNS > somewhere that doesn't know about the real IPA services (8.8.8.8) so > it won't try and sync or replicate. > = > Attempting to upgrade hits a snags or two, some described in bugs > already like the pki version number confusing the apt > scripts https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1703051 > ). > The one I can't work around however is below. > = > It seems deeply unhappy, and restarting the services result in the > dogtag-pki web page being available until a login attempt is made > (as occurs during the ipa-server-upgrade) after which point it bombs > with a 500 error. > = > Could the below caused > by https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1716842 > ? > = > Any advice appreciated, as I think even when 18.04 hits with the > proposed updates to rely on to tomcat 8.5, I'll still need to > upgrade via 17.10 which seems currently fraught! If it relates to > my method of cloning the VM, is there a better way of testing > upgrades without potentially hosing the existing live systems? > = > = > Thanks in advance, > = > David > = > 2017-11-15T13:05:59Z DEBUG approved_usage =3D SSL Server > intended_usage =3D SSL Server > 2017-11-15T13:05:59Z DEBUG cert valid True for "CN=3Dipa1.my.net > ,O=3DTHOMAC.NET " > 2017-11-15T13:05:59Z DEBUG handshake complete, peer =3D IPADDRESS > 2017-11-15T13:05:59Z DEBUG Protocol: TLS1.2 > 2017-11-15T13:05:59Z DEBUG Cipher: TLS_RSA_WITH_AES_128_CBC_SHA > 2017-11-15T13:05:59Z DEBUG response status 500 > 2017-11-15T13:05:59Z DEBUG response headers {'content-length': > '2292', 'content-language': 'en', 'server': 'Apache-Coyote/1.1', > 'connection': 'close', 'date': 'Wed, 15 Nov 2017 13:05:59 GMT', > 'content-type': 'text/html;charset=3Dutf-8'} > 2017-11-15T13:05:59Z DEBUG response body ' html>Apache Tomcat/8.0.46 (Ubuntu) - Error > report >

HTTP Status 500 - Subsystem unavailable

class=3D"line">

type Exception > report

message Subsystem > unavailable

description The server encountered > an internal error that prevented it from fulfilling this > request.

exception

javax.ws.rs
>     .ServiceUnavailableException: Subsystem
>     unavailable\n\tcom.netscape.cms.tomcat.ProxyRealm.findSecurityConstra=
ints(ProxyRealm.java:138)\n\torg.apache.catalina.authenticator.Authenticato=
rBase.invoke(AuthenticatorBase.java:498)\n\torg.apache.catalina.valves.Erro=
rReportValve.invoke(ErrorReportValve.java:79)\n\torg.apache.catalina.valves=
.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:620)\n\torg.apac=
he.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:502)\n\torg.=
apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processo=
r.java:1132)\n\torg.apache.coyote.AbstractProtocol$AbstractConnectionHandle=
r.process(AbstractProtocol.java:684)\n\torg.apache.tomcat.util.net.JIoEndpo=
int$SocketProcessor.run(JIoEndpoint.java:283)\n\tjava.util.concurrent.Threa=
dPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)\n\tjava.util.concurre=
nt.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)\n\torg.apache=
.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)\n\=
tjava.lang.Thread.run(Thread.java:748)\n

note > The full stack trace of the root cause is available in the Apache > Tomcat/8.0.46 (Ubuntu) logs.

Apache > Tomcat/8.0.46 (Ubuntu)

' > 2017-11-15T13:05:59Z ERROR IPA server upgrade failed: Inspect > /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. > 2017-11-15T13:05:59Z DEBUG File > "/usr/lib/python2.7/dist-packages/ipapython/admintool.py", line 172, > in execute > return_value =3D self.run() > File > "/usr/lib/python2.7/dist-packages/ipaserver/install/ipa_server_upgrad= e.py", > line 46, in run > server.upgrade() > File > "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py= ", > line 1878, in upgrade > upgrade_configuration() > File > "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py= ", > line 1797, in upgrade_configuration > ca_enable_ldap_profile_subsystem(ca) > File > "/usr/lib/python2.7/dist-packages/ipaserver/install/server/upgrade.py= ", > line 347, in ca_enable_ldap_profile_subsystem > cainstance.migrate_profiles_to_ldap() > File > "/usr/lib/python2.7/dist-packages/ipaserver/install/cainstance.py", > line 1981, in migrate_profiles_to_ldap > _create_dogtag_profile(profile_id, profile_data, overwrite=3DFals= e) > File > "/usr/lib/python2.7/dist-packages/ipaserver/install/cainstance.py", > line 1987, in _create_dogtag_profile > with api.Backend.ra_certprofile as profile_api: > File > "/usr/lib/python2.7/dist-packages/ipaserver/plugins/dogtag.py", line > 1294, in __enter__ > raise errors.RemoteRetrieveError(reason=3D_('Failed to > authenticate to CA REST API')) > = > 2017-11-15T13:05:59Z DEBUG The ipa-server-upgrade command failed, > exception: RemoteRetrieveError: Failed to authenticate to CA REST API > 2017-11-15T13:05:59Z ERROR Unexpected error - see > /var/log/ipaupgrade.log for details: > RemoteRetrieveError: Failed to authenticate to CA REST API > = > = > = > = > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.= org > = --===============0645897047364931702==-- From davidcharvey at googlemail.com Wed Nov 15 16:53:14 2017 Content-Type: multipart/mixed; boundary="===============1511437130801694390==" MIME-Version: 1.0 From: David Harvey To: freeipa-users at lists.fedorahosted.org Subject: [Freeipa-users] Re: upgrade to ubuntu 17.10 fails Date: Wed, 15 Nov 2017 16:52:28 +0000 Message-ID: In-Reply-To: 543211a4-fc11-ccbf-c5bb-d1c580fedb2b@redhat.com --===============1511437130801694390== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Thanks Rob, Simon, Rob, will check, but thought my cert system was healthy before. It's relatively new (6months or less), and no sub-ca's involved.. Any specifics on how to invoke the selftests in some manner that might provide digestible output? Or could it be my dirty hack of cloning and isolation and I should do as Simon suggested :)? Simon. WRT spinning up a replica. I was under the impression that all running servers had to be of the same version, am I mistaken with that? I had avoided what you were suggesting as I feared the new server might update the schema on the existing ones! Thanks again, appreciate the steering! On 15 Nov 2017 14:34, "Rob Crittenden" wrote: David Harvey via FreeIPA-users wrote: > Sorry for the dump size, but not sure if the below from > /var/log/pki/pki-tomcat/localhost.date.log helps: Looks like the selftests are failing. I'd check that your CA subsystem certificates are not expired, etc. rob > > 15-Nov-2017 12:14:50.557 SEVERE [localhost-startStop-1] > org.apache.catalina.core.ApplicationContext.log StandardWrapper.Throwable > java.lang.NullPointerException > at > com.netscape.cmscore.selftests.SelfTestSubsystem. shutdown(SelfTestSubsystem.java:1886) > at > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems( CMSEngine.java:2118) > at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > at > com.netscape.cms.servlet.base.CMSStartServlet.init( CMSStartServlet.java:114) > at javax.servlet.GenericServlet.init(GenericServlet.java:158) > at > org.apache.catalina.core.StandardWrapper.initServlet( StandardWrapper.java:1227) > at > org.apache.catalina.core.StandardWrapper.loadServlet( StandardWrapper.java:1140) > at org.apache.catalina.core.StandardWrapper.load( StandardWrapper.java:1027) > at > org.apache.catalina.core.StandardContext.loadOnStartup( StandardContext.java:5038) > at > org.apache.catalina.core.StandardContext.startInternal( StandardContext.java:5348) > at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) > at > org.apache.catalina.core.ContainerBase.addChildInternal( ContainerBase.java:753) > at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:729) > at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:717) > at > org.apache.catalina.startup.HostConfig.deployDescriptor( HostConfig.java:621) > at > org.apache.catalina.startup.HostConfig$DeployDescriptor. run(HostConfig.java:1835) > at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) > at java.util.concurrent.FutureTask.run(FutureTask.java:266) > at > java.util.concurrent.ThreadPoolExecutor.runWorker( ThreadPoolExecutor.java:1149) > at > java.util.concurrent.ThreadPoolExecutor$Worker.run( ThreadPoolExecutor.java:624) > at java.lang.Thread.run(Thread.java:748) > > 15-Nov-2017 12:14:50.558 SEVERE [localhost-startStop-1] > org.apache.catalina.core.StandardContext.loadOnStartup Servlet [castart] > in web application [/ca] threw load() exception > java.lang.NullPointerException > at > com.netscape.cmscore.selftests.SelfTestSubsystem. shutdown(SelfTestSubsystem.java:1886) > at > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems( CMSEngine.java:2118) > at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > at > com.netscape.cms.servlet.base.CMSStartServlet.init( CMSStartServlet.java:114) > at javax.servlet.GenericServlet.init(GenericServlet.java:158) > at > org.apache.catalina.core.StandardWrapper.initServlet( StandardWrapper.java:1227) > at > org.apache.catalina.core.StandardWrapper.loadServlet( StandardWrapper.java:1140) > at org.apache.catalina.core.StandardWrapper.load( StandardWrapper.java:1027) > at > org.apache.catalina.core.StandardContext.loadOnStartup( StandardContext.java:5038) > at > org.apache.catalina.core.StandardContext.startInternal( StandardContext.java:5348) > at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) > at > org.apache.catalina.core.ContainerBase.addChildInternal( ContainerBase.java:753) > at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:729) > at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:717) > at > org.apache.catalina.startup.HostConfig.deployDescriptor( HostConfig.java:621) > at > org.apache.catalina.startup.HostConfig$DeployDescriptor. run(HostConfig.java:1835) > at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) > at java.util.concurrent.FutureTask.run(FutureTask.java:266) > at > java.util.concurrent.ThreadPoolExecutor.runWorker( ThreadPoolExecutor.java:1149) > at > java.util.concurrent.ThreadPoolExecutor$Worker.run( ThreadPoolExecutor.java:624) > at java.lang.Thread.run(Thread.java:748) > > 15-Nov-2017 12:14:54.509 SEVERE [http-bio-8443-exec-1] > org.apache.catalina.core.StandardHostValve.invoke Exception Processing > /ca/rest/account/login > javax.ws.rs.ServiceUnavailableException: Subsystem unavailable > at > com.netscape.cms.tomcat.ProxyRealm.findSecurityConstraints( ProxyRealm.java:138) > at > org.apache.catalina.authenticator.AuthenticatorBase.invoke( AuthenticatorBase.java:498) > at > org.apache.catalina.core.StandardHostValve.invoke( StandardHostValve.java:141) > at > org.apache.catalina.valves.ErrorReportValve.invoke( ErrorReportValve.java:79) > at > org.apache.catalina.valves.AbstractAccessLogValve.invoke( AbstractAccessLogValve.java:620) > at > org.apache.catalina.core.StandardEngineValve.invoke( StandardEngineValve.java:88) > at > org.apache.catalina.connector.CoyoteAdapter.service( CoyoteAdapter.java:502) > at > org.apache.coyote.http11.AbstractHttp11Processor.process( AbstractHttp11Processor.java:1132) > at > org.apache.coyote.AbstractProtocol$AbstractConnectionHandler. process(AbstractProtocol.java:684) > at > org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor. run(JIoEndpoint.java:283) > at > java.util.concurrent.ThreadPoolExecutor.runWorker( ThreadPoolExecutor.java:1149) > at > java.util.concurrent.ThreadPoolExecutor$Worker.run( ThreadPoolExecutor.java:624) > at > org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run( TaskThread.java:61) > at java.lang.Thread.run(Thread.java:748) > > 15-Nov-2017 13:05:55.874 SEVERE [localhost-startStop-1] > org.apache.catalina.core.ApplicationContext.log StandardWrapper.Throwable > java.lang.NullPointerException > at > com.netscape.cmscore.selftests.SelfTestSubsystem. shutdown(SelfTestSubsystem.java:1886) > at > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems( CMSEngine.java:2118) > at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > at > com.netscape.cms.servlet.base.CMSStartServlet.init( CMSStartServlet.java:114) > at javax.servlet.GenericServlet.init(GenericServlet.java:158) > at > org.apache.catalina.core.StandardWrapper.initServlet( StandardWrapper.java:1227) > at > org.apache.catalina.core.StandardWrapper.loadServlet( StandardWrapper.java:1140) > at org.apache.catalina.core.StandardWrapper.load( StandardWrapper.java:1027) > at > org.apache.catalina.core.StandardContext.loadOnStartup( StandardContext.java:5038) > at > org.apache.catalina.core.StandardContext.startInternal( StandardContext.java:5348) > at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) > at > org.apache.catalina.core.ContainerBase.addChildInternal( ContainerBase.java:753) > at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:729) > at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:717) > at > org.apache.catalina.startup.HostConfig.deployDescriptor( HostConfig.java:621) > at > org.apache.catalina.startup.HostConfig$DeployDescriptor. run(HostConfig.java:1835) > at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) > at java.util.concurrent.FutureTask.run(FutureTask.java:266) > at > java.util.concurrent.ThreadPoolExecutor.runWorker( ThreadPoolExecutor.java:1149) > at > java.util.concurrent.ThreadPoolExecutor$Worker.run( ThreadPoolExecutor.java:624) > at java.lang.Thread.run(Thread.java:748) > > 15-Nov-2017 13:05:55.875 SEVERE [localhost-startStop-1] > org.apache.catalina.core.StandardContext.loadOnStartup Servlet [castart] > in web application [/ca] threw load() exception > java.lang.NullPointerException > at > com.netscape.cmscore.selftests.SelfTestSubsystem. shutdown(SelfTestSubsystem.java:1886) > at > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems( CMSEngine.java:2118) > at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > at > com.netscape.cms.servlet.base.CMSStartServlet.init( CMSStartServlet.java:114) > at javax.servlet.GenericServlet.init(GenericServlet.java:158) > at > org.apache.catalina.core.StandardWrapper.initServlet( StandardWrapper.java:1227) > at > org.apache.catalina.core.StandardWrapper.loadServlet( StandardWrapper.java:1140) > at org.apache.catalina.core.StandardWrapper.load( StandardWrapper.java:1027) > at > org.apache.catalina.core.StandardContext.loadOnStartup( StandardContext.java:5038) > at > org.apache.catalina.core.StandardContext.startInternal( StandardContext.java:5348) > at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) > at > org.apache.catalina.core.ContainerBase.addChildInternal( ContainerBase.java:753) > at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:729) > at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:717) > at > org.apache.catalina.startup.HostConfig.deployDescriptor( HostConfig.java:621) > at > org.apache.catalina.startup.HostConfig$DeployDescriptor. run(HostConfig.java:1835) > at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) > at java.util.concurrent.FutureTask.run(FutureTask.java:266) > at > java.util.concurrent.ThreadPoolExecutor.runWorker( ThreadPoolExecutor.java:1149) > at > java.util.concurrent.ThreadPoolExecutor$Worker.run( ThreadPoolExecutor.java:624) > at java.lang.Thread.run(Thread.java:748) > > 15-Nov-2017 13:05:59.706 SEVERE [http-bio-8443-exec-1] > org.apache.catalina.core.StandardHostValve.invoke Exception Processing > /ca/rest/account/login > javax.ws.rs.ServiceUnavailableException: Subsystem unavailable > at > com.netscape.cms.tomcat.ProxyRealm.findSecurityConstraints( ProxyRealm.java:138) > at > org.apache.catalina.authenticator.AuthenticatorBase.invoke( AuthenticatorBase.java:498) > at > org.apache.catalina.core.StandardHostValve.invoke( StandardHostValve.java:141) > at > org.apache.catalina.valves.ErrorReportValve.invoke( ErrorReportValve.java:79) > at > org.apache.catalina.valves.AbstractAccessLogValve.invoke( AbstractAccessLogValve.java:620) > at > org.apache.catalina.core.StandardEngineValve.invoke( StandardEngineValve.java:88) > at > org.apache.catalina.connector.CoyoteAdapter.service( CoyoteAdapter.java:502) > at > org.apache.coyote.http11.AbstractHttp11Processor.process( AbstractHttp11Processor.java:1132) > at > org.apache.coyote.AbstractProtocol$AbstractConnectionHandler. process(AbstractProtocol.java:684) > at > org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor. run(JIoEndpoint.java:283) > at > java.util.concurrent.ThreadPoolExecutor.runWorker( ThreadPoolExecutor.java:1149) > at > java.util.concurrent.ThreadPoolExecutor$Worker.run( ThreadPoolExecutor.java:624) > at > org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run( TaskThread.java:61) > at java.lang.Thread.run(Thread.java:748) > > > On 15 November 2017 at 13:23, David Harvey > wrote: > > Hi wisdom of the list, > > I know I am an edge case with running on ubuntu, but hoped someone > might be able to shed some light. > > A bit of background. I'm trying to test upgrades without > potentially hosing my existing services, so I have cloned the VM, > given it a new IP address, updated hosts file and pointed DNS > somewhere that doesn't know about the real IPA services (8.8.8.8) so > it won't try and sync or replicate. > > Attempting to upgrade hits a snags or two, some described in bugs > already like the pki version number confusing the apt > scripts https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1703051 > ). > The one I can't work around however is below. > > It seems deeply unhappy, and restarting the services result in the > dogtag-pki web page being available until a login attempt is made > (as occurs during the ipa-server-upgrade) after which point it bombs > with a 500 error. > > Could the below caused > by https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1716842 > ? > > Any advice appreciated, as I think even when 18.04 hits with the > proposed updates to rely on to tomcat 8.5, I'll still need to > upgrade via 17.10 which seems currently fraught! If it relates to > my method of cloning the VM, is there a better way of testing > upgrades without potentially hosing the existing live systems? > > > Thanks in advance, > > David > > 2017-11-15T13:05:59Z DEBUG approved_usage =3D SSL Server > intended_usage =3D SSL Server > 2017-11-15T13:05:59Z DEBUG cert valid True for "CN=3Dipa1.my.net > ,O=3DTHOMAC.NET " > 2017-11-15T13:05:59Z DEBUG handshake complete, peer =3D IPADDRESS > 2017-11-15T13:05:59Z DEBUG Protocol: TLS1.2 > 2017-11-15T13:05:59Z DEBUG Cipher: TLS_RSA_WITH_AES_128_CBC_SHA > 2017-11-15T13:05:59Z DEBUG response status 500 > 2017-11-15T13:05:59Z DEBUG response headers {'content-length': > '2292', 'content-language': 'en', 'server': 'Apache-Coyote/1.1', > 'connection': 'close', 'date': 'Wed, 15 Nov 2017 13:05:59 GMT', > 'content-type': 'text/html;charset=3Dutf-8'} > 2017-11-15T13:05:59Z DEBUG response body ' html>Apache Tomcat/8.0.46 (Ubuntu) - Error > report >

HTTP Status 500 - Subsystem unavailable

class=3D"line">

type Exception > report

message Subsystem > unavailable

description The server encountered > an internal error that prevented it from fulfilling this > request.

exception

javax.ws.rs
>     .ServiceUnavailableException: Subsystem
>     unavailable\n\tcom.netscape.cms.tomcat.ProxyRealm.
findSecurityConstraints(ProxyRealm.java:138)\n\torg.
apache.catalina.authenticator.AuthenticatorBase.invoke(
AuthenticatorBase.java:498)\n\torg.apache.catalina.valves.
ErrorReportValve.invoke(ErrorReportValve.java:79)\n\
torg.apache.catalina.valves.AbstractAccessLogValve.invoke(
AbstractAccessLogValve.java:620)\n\torg.apache.catalina.
connector.CoyoteAdapter.service(CoyoteAdapter.java:
502)\n\torg.apache.coyote.http11.AbstractHttp11Processor.process(
AbstractHttp11Processor.java:1132)\n\torg.apache.coyote.AbstractProtocol$
AbstractConnectionHandler.process(AbstractProtocol.java:
684)\n\torg.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(
JIoEndpoint.java:283)\n\tjava.util.concurrent.ThreadPoolExecutor.runWorker(
ThreadPoolExecutor.java:1149)\n\tjava.util.concurrent.
ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)\
n\torg.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(
TaskThread.java:61)\n\tjava.lang.Thread.run(Thread.java:
748)\n

note > The full stack trace of the root cause is available in the Apache > Tomcat/8.0.46 (Ubuntu) logs.

Apache > Tomcat/8.0.46 (Ubuntu)

' > 2017-11-15T13:05:59Z ERROR IPA server upgrade failed: Inspect > /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. > 2017-11-15T13:05:59Z DEBUG File > "/usr/lib/python2.7/dist-packages/ipapython/admintool.py", line 172, > in execute > return_value =3D self.run() > File > "/usr/lib/python2.7/dist-packages/ipaserver/install/ ipa_server_upgrade.py", > line 46, in run > server.upgrade() > File > "/usr/lib/python2.7/dist-packages/ipaserver/install/ server/upgrade.py", > line 1878, in upgrade > upgrade_configuration() > File > "/usr/lib/python2.7/dist-packages/ipaserver/install/ server/upgrade.py", > line 1797, in upgrade_configuration > ca_enable_ldap_profile_subsystem(ca) > File > "/usr/lib/python2.7/dist-packages/ipaserver/install/ server/upgrade.py", > line 347, in ca_enable_ldap_profile_subsystem > cainstance.migrate_profiles_to_ldap() > File > "/usr/lib/python2.7/dist-packages/ipaserver/install/cainstance.py", > line 1981, in migrate_profiles_to_ldap > _create_dogtag_profile(profile_id, profile_data, overwrite=3DFals= e) > File > "/usr/lib/python2.7/dist-packages/ipaserver/install/cainstance.py", > line 1987, in _create_dogtag_profile > with api.Backend.ra_certprofile as profile_api: > File > "/usr/lib/python2.7/dist-packages/ipaserver/plugins/dogtag.py", line > 1294, in __enter__ > raise errors.RemoteRetrieveError(reason=3D_('Failed to > authenticate to CA REST API')) > > 2017-11-15T13:05:59Z DEBUG The ipa-server-upgrade command failed, > exception: RemoteRetrieveError: Failed to authenticate to CA REST API > 2017-11-15T13:05:59Z ERROR Unexpected error - see > /var/log/ipaupgrade.log for details: > RemoteRetrieveError: Failed to authenticate to CA REST API > > > > > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.= org > --===============1511437130801694390== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGRpdiBkaXI9ImF1dG8iPjxkaXY+VGhhbmtzIFJvYiwgU2ltb24sPGRpdiBkaXI9ImF1dG8iPjxi cj48L2Rpdj48ZGl2IGRpcj0iYXV0byI+Um9iLCB3aWxsIGNoZWNrLCBidXQgdGhvdWdodCBteSBj ZXJ0IHN5c3RlbSB3YXMgaGVhbHRoeSBiZWZvcmUuIEl0JiMzOTtzIHJlbGF0aXZlbHkgbmV3ICg2 bW9udGhzIG9yIGxlc3MpLCBhbmQgbm8gc3ViLWNhJiMzOTtzIGludm9sdmVkLi4gQW55IHNwZWNp ZmljcyBvbiBob3cgdG8gaW52b2tlIHRoZSBzZWxmdGVzdHMgaW4gc29tZSBtYW5uZXIgdGhhdCBt aWdodCBwcm92aWRlIGRpZ2VzdGlibGUgb3V0cHV0PyBPciBjb3VsZCBpdCBiZSBteSBkaXJ0eSBo YWNrIG9mIGNsb25pbmcgYW5kIGlzb2xhdGlvbiBhbmQgSSBzaG91bGQgZG8gYXMgU2ltb24gc3Vn Z2VzdGVkIDopPzwvZGl2PjxkaXYgZGlyPSJhdXRvIj48YnI+PC9kaXY+PGRpdiBkaXI9ImF1dG8i PlNpbW9uLiBXUlQgc3Bpbm5pbmcgdXAgYSByZXBsaWNhLiBJIHdhcyB1bmRlciB0aGUgaW1wcmVz c2lvbiB0aGF0IGFsbCBydW5uaW5nIHNlcnZlcnMgaGFkIHRvIGJlIG9mIHRoZSBzYW1lIHZlcnNp b24sIGFtIEkgbWlzdGFrZW4gd2l0aCB0aGF0P8KgPC9kaXY+PGRpdiBkaXI9ImF1dG8iPkkgaGFk IGF2b2lkZWQgd2hhdCB5b3Ugd2VyZSBzdWdnZXN0aW5nIGFzIEkgZmVhcmVkIHRoZSBuZXcgc2Vy dmVyIG1pZ2h0IHVwZGF0ZSB0aGUgc2NoZW1hIG9uIHRoZSBleGlzdGluZyBvbmVzITwvZGl2Pjxk aXYgZGlyPSJhdXRvIj48YnI+PC9kaXY+VGhhbmtzIGFnYWluLCBhcHByZWNpYXRlIHRoZSBzdGVl cmluZyE8YnI+PGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPjxicj48ZGl2IGNsYXNzPSJnbWFpbF9x dW90ZSI+T24gMTUgTm92IDIwMTcgMTQ6MzQsICZxdW90O1JvYiBDcml0dGVuZGVuJnF1b3Q7ICZs dDs8YSBocmVmPSJtYWlsdG86cmNyaXR0ZW5AcmVkaGF0LmNvbSI+cmNyaXR0ZW5AcmVkaGF0LmNv bTwvYT4mZ3Q7IHdyb3RlOjxiciB0eXBlPSJhdHRyaWJ1dGlvbiI+PGJsb2NrcXVvdGUgY2xhc3M9 InF1b3RlIiBzdHlsZT0ibWFyZ2luOjAgMCAwIC44ZXg7Ym9yZGVyLWxlZnQ6MXB4ICNjY2Mgc29s aWQ7cGFkZGluZy1sZWZ0OjFleCI+PGRpdiBjbGFzcz0icXVvdGVkLXRleHQiPkRhdmlkIEhhcnZl eSB2aWEgRnJlZUlQQS11c2VycyB3cm90ZTo8YnI+CiZndDsgU29ycnkgZm9yIHRoZSBkdW1wIHNp emUsIGJ1dCBub3Qgc3VyZSBpZiB0aGUgYmVsb3cgZnJvbTxicj4KJmd0OyAvdmFyL2xvZy9wa2kv cGtpLXRvbWNhdC88d2JyPmxvY2FsaG9zdC5kYXRlLmxvZyBoZWxwczo8YnI+Cjxicj4KPC9kaXY+ TG9va3MgbGlrZSB0aGUgc2VsZnRlc3RzIGFyZSBmYWlsaW5nLiBJJiMzOTtkIGNoZWNrIHRoYXQg eW91ciBDQSBzdWJzeXN0ZW08YnI+CmNlcnRpZmljYXRlcyBhcmUgbm90IGV4cGlyZWQsIGV0Yy48 YnI+Cjxicj4Kcm9iPGJyPgo8ZGl2IGNsYXNzPSJlbGlkZWQtdGV4dCI+PGJyPgomZ3Q7PGJyPgom Z3Q7IDE1LU5vdi0yMDE3IDEyOjE0OjUwLjU1NyBTRVZFUkUgW2xvY2FsaG9zdC1zdGFydFN0b3At MV08YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLjx3YnI+QXBwbGljYXRpb25Db250 ZXh0LmxvZyBTdGFuZGFyZFdyYXBwZXIuVGhyb3dhYmxlPGJyPgomZ3Q7wqAgamF2YS5sYW5nLk51 bGxQb2ludGVyRXhjZXB0aW9uPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGNvbS5uZXRzY2FwZS5jbXNj b3JlLjx3YnI+c2VsZnRlc3RzLlNlbGZUZXN0U3Vic3lzdGVtLjx3YnI+c2h1dGRvd24oU2VsZlRl c3RTdWJzeXN0ZW0uPHdicj5qYXZhOjE4ODYpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGNvbS5uZXRz Y2FwZS5jbXNjb3JlLmFwcHMuPHdicj5DTVNFbmdpbmUuc2h1dGRvd25TdWJzeXN0ZW1zKDx3YnI+ Q01TRW5naW5lLmphdmE6MjExOCk8YnI+CiZndDsgYXQgY29tLm5ldHNjYXBlLmNtc2NvcmUuYXBw cy48d2JyPkNNU0VuZ2luZS5zaHV0ZG93bihDTVNFbmdpbmUuPHdicj5qYXZhOjIwMTMpPGJyPgom Z3Q7IGF0IGNvbS5uZXRzY2FwZS5jZXJ0c3J2LmFwcHMuQ01TLjx3YnI+c2h1dGRvd24oQ01TLmph dmE6MjM0KTxicj4KJmd0OyBhdCBjb20ubmV0c2NhcGUuY2VydHNydi5hcHBzLkNNUy48d2JyPnN0 YXJ0KENNUy5qYXZhOjE2MzApPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGNvbS5uZXRzY2FwZS5jbXMu c2VydmxldC5iYXNlLjx3YnI+Q01TU3RhcnRTZXJ2bGV0LmluaXQoPHdicj5DTVNTdGFydFNlcnZs ZXQuamF2YToxMTQpPGJyPgomZ3Q7IGF0IGphdmF4LnNlcnZsZXQuR2VuZXJpY1NlcnZsZXQuPHdi cj5pbml0KEdlbmVyaWNTZXJ2bGV0LmphdmE6MTU4KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcu YXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5TdGFuZGFyZFdyYXBwZXIuaW5pdFNlcnZsZXQoPHdi cj5TdGFuZGFyZFdyYXBwZXIuamF2YToxMjI3KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBh Y2hlLmNhdGFsaW5hLmNvcmUuPHdicj5TdGFuZGFyZFdyYXBwZXIubG9hZFNlcnZsZXQoPHdicj5T dGFuZGFyZFdyYXBwZXIuamF2YToxMTQwKTxicj4KJmd0OyBhdCBvcmcuYXBhY2hlLmNhdGFsaW5h LmNvcmUuPHdicj5TdGFuZGFyZFdyYXBwZXIubG9hZCg8d2JyPlN0YW5kYXJkV3JhcHBlci5qYXZh OjEwMjcpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS48d2Jy PlN0YW5kYXJkQ29udGV4dC5sb2FkT25TdGFydHVwKDx3YnI+U3RhbmRhcmRDb250ZXh0LmphdmE6 NTAzOCk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLjx3YnI+ U3RhbmRhcmRDb250ZXh0LnN0YXJ0SW50ZXJuYWwoPHdicj5TdGFuZGFyZENvbnRleHQuamF2YTo1 MzQ4KTxicj4KJmd0OyBhdCBvcmcuYXBhY2hlLmNhdGFsaW5hLnV0aWwuPHdicj5MaWZlY3ljbGVC YXNlLnN0YXJ0KDx3YnI+TGlmZWN5Y2xlQmFzZS5qYXZhOjE0NSk8YnI+CiZndDsgYXQ8YnI+CiZn dDsgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLjx3YnI+Q29udGFpbmVyQmFzZS48d2JyPmFkZENo aWxkSW50ZXJuYWwoPHdicj5Db250YWluZXJCYXNlLmphdmE6NzUzKTxicj4KJmd0OyBhdCBvcmcu YXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5Db250YWluZXJCYXNlLmFkZENoaWxkKDx3YnI+Q29u dGFpbmVyQmFzZS5qYXZhOjcyOSk8YnI+CiZndDsgYXQgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3Jl Ljx3YnI+U3RhbmRhcmRIb3N0LmFkZENoaWxkKDx3YnI+U3RhbmRhcmRIb3N0LmphdmE6NzE3KTxi cj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLnN0YXJ0dXAuPHdicj5Ib3N0 Q29uZmlnLmRlcGxveURlc2NyaXB0b3IoPHdicj5Ib3N0Q29uZmlnLmphdmE6NjIxKTxicj4KJmd0 OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLnN0YXJ0dXAuPHdicj5Ib3N0Q29uZmln JERlcGxveURlc2NyaXB0b3IuPHdicj5ydW4oSG9zdENvbmZpZy5qYXZhOjE4MzUpPGJyPgomZ3Q7 IGF0IGphdmEudXRpbC5jb25jdXJyZW50Ljx3YnI+RXhlY3V0b3JzJFJ1bm5hYmxlQWRhcHRlci48 d2JyPmNhbGwoRXhlY3V0b3JzLmphdmE6NTExKTxicj4KJmd0OyBhdCBqYXZhLnV0aWwuY29uY3Vy cmVudC48d2JyPkZ1dHVyZVRhc2sucnVuKEZ1dHVyZVRhc2suPHdicj5qYXZhOjI2Nik8YnI+CiZn dDsgYXQ8YnI+CiZndDsgamF2YS51dGlsLmNvbmN1cnJlbnQuPHdicj5UaHJlYWRQb29sRXhlY3V0 b3IucnVuV29ya2VyKDx3YnI+VGhyZWFkUG9vbEV4ZWN1dG9yLmphdmE6MTE0OSk8YnI+CiZndDsg YXQ8YnI+CiZndDsgamF2YS51dGlsLmNvbmN1cnJlbnQuPHdicj5UaHJlYWRQb29sRXhlY3V0b3Ik V29ya2VyLnJ1big8d2JyPlRocmVhZFBvb2xFeGVjdXRvci5qYXZhOjYyNCk8YnI+CiZndDsgYXQg amF2YS5sYW5nLlRocmVhZC5ydW4oVGhyZWFkLjx3YnI+amF2YTo3NDgpPGJyPgomZ3Q7PGJyPgom Z3Q7IDE1LU5vdi0yMDE3IDEyOjE0OjUwLjU1OCBTRVZFUkUgW2xvY2FsaG9zdC1zdGFydFN0b3At MV08YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLjx3YnI+U3RhbmRhcmRDb250ZXh0 LmxvYWRPblN0YXJ0dXAgU2VydmxldCBbY2FzdGFydF08YnI+CiZndDsgaW4gd2ViIGFwcGxpY2F0 aW9uIFsvY2FdIHRocmV3IGxvYWQoKSBleGNlcHRpb248YnI+CiZndDvCoCBqYXZhLmxhbmcuTnVs bFBvaW50ZXJFeGNlcHRpb248YnI+CiZndDsgYXQ8YnI+CiZndDsgY29tLm5ldHNjYXBlLmNtc2Nv cmUuPHdicj5zZWxmdGVzdHMuU2VsZlRlc3RTdWJzeXN0ZW0uPHdicj5zaHV0ZG93bihTZWxmVGVz dFN1YnN5c3RlbS48d2JyPmphdmE6MTg4Nik8YnI+CiZndDsgYXQ8YnI+CiZndDsgY29tLm5ldHNj YXBlLmNtc2NvcmUuYXBwcy48d2JyPkNNU0VuZ2luZS5zaHV0ZG93blN1YnN5c3RlbXMoPHdicj5D TVNFbmdpbmUuamF2YToyMTE4KTxicj4KJmd0OyBhdCBjb20ubmV0c2NhcGUuY21zY29yZS5hcHBz Ljx3YnI+Q01TRW5naW5lLnNodXRkb3duKENNU0VuZ2luZS48d2JyPmphdmE6MjAxMyk8YnI+CiZn dDsgYXQgY29tLm5ldHNjYXBlLmNlcnRzcnYuYXBwcy5DTVMuPHdicj5zaHV0ZG93bihDTVMuamF2 YToyMzQpPGJyPgomZ3Q7IGF0IGNvbS5uZXRzY2FwZS5jZXJ0c3J2LmFwcHMuQ01TLjx3YnI+c3Rh cnQoQ01TLmphdmE6MTYzMCk8YnI+CiZndDsgYXQ8YnI+CiZndDsgY29tLm5ldHNjYXBlLmNtcy5z ZXJ2bGV0LmJhc2UuPHdicj5DTVNTdGFydFNlcnZsZXQuaW5pdCg8d2JyPkNNU1N0YXJ0U2Vydmxl dC5qYXZhOjExNCk8YnI+CiZndDsgYXQgamF2YXguc2VydmxldC5HZW5lcmljU2VydmxldC48d2Jy PmluaXQoR2VuZXJpY1NlcnZsZXQuamF2YToxNTgpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5h cGFjaGUuY2F0YWxpbmEuY29yZS48d2JyPlN0YW5kYXJkV3JhcHBlci5pbml0U2VydmxldCg8d2Jy PlN0YW5kYXJkV3JhcHBlci5qYXZhOjEyMjcpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFj aGUuY2F0YWxpbmEuY29yZS48d2JyPlN0YW5kYXJkV3JhcHBlci5sb2FkU2VydmxldCg8d2JyPlN0 YW5kYXJkV3JhcHBlci5qYXZhOjExNDApPGJyPgomZ3Q7IGF0IG9yZy5hcGFjaGUuY2F0YWxpbmEu Y29yZS48d2JyPlN0YW5kYXJkV3JhcHBlci5sb2FkKDx3YnI+U3RhbmRhcmRXcmFwcGVyLmphdmE6 MTAyNyk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLjx3YnI+ U3RhbmRhcmRDb250ZXh0LmxvYWRPblN0YXJ0dXAoPHdicj5TdGFuZGFyZENvbnRleHQuamF2YTo1 MDM4KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5T dGFuZGFyZENvbnRleHQuc3RhcnRJbnRlcm5hbCg8d2JyPlN0YW5kYXJkQ29udGV4dC5qYXZhOjUz NDgpPGJyPgomZ3Q7IGF0IG9yZy5hcGFjaGUuY2F0YWxpbmEudXRpbC48d2JyPkxpZmVjeWNsZUJh c2Uuc3RhcnQoPHdicj5MaWZlY3ljbGVCYXNlLmphdmE6MTQ1KTxicj4KJmd0OyBhdDxicj4KJmd0 OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5Db250YWluZXJCYXNlLjx3YnI+YWRkQ2hp bGRJbnRlcm5hbCg8d2JyPkNvbnRhaW5lckJhc2UuamF2YTo3NTMpPGJyPgomZ3Q7IGF0IG9yZy5h cGFjaGUuY2F0YWxpbmEuY29yZS48d2JyPkNvbnRhaW5lckJhc2UuYWRkQ2hpbGQoPHdicj5Db250 YWluZXJCYXNlLmphdmE6NzI5KTxicj4KJmd0OyBhdCBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUu PHdicj5TdGFuZGFyZEhvc3QuYWRkQ2hpbGQoPHdicj5TdGFuZGFyZEhvc3QuamF2YTo3MTcpPGJy PgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuc3RhcnR1cC48d2JyPkhvc3RD b25maWcuZGVwbG95RGVzY3JpcHRvcig8d2JyPkhvc3RDb25maWcuamF2YTo2MjEpPGJyPgomZ3Q7 IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuc3RhcnR1cC48d2JyPkhvc3RDb25maWck RGVwbG95RGVzY3JpcHRvci48d2JyPnJ1bihIb3N0Q29uZmlnLmphdmE6MTgzNSk8YnI+CiZndDsg YXQgamF2YS51dGlsLmNvbmN1cnJlbnQuPHdicj5FeGVjdXRvcnMkUnVubmFibGVBZGFwdGVyLjx3 YnI+Y2FsbChFeGVjdXRvcnMuamF2YTo1MTEpPGJyPgomZ3Q7IGF0IGphdmEudXRpbC5jb25jdXJy ZW50Ljx3YnI+RnV0dXJlVGFzay5ydW4oRnV0dXJlVGFzay48d2JyPmphdmE6MjY2KTxicj4KJmd0 OyBhdDxicj4KJmd0OyBqYXZhLnV0aWwuY29uY3VycmVudC48d2JyPlRocmVhZFBvb2xFeGVjdXRv ci5ydW5Xb3JrZXIoPHdicj5UaHJlYWRQb29sRXhlY3V0b3IuamF2YToxMTQ5KTxicj4KJmd0OyBh dDxicj4KJmd0OyBqYXZhLnV0aWwuY29uY3VycmVudC48d2JyPlRocmVhZFBvb2xFeGVjdXRvciRX b3JrZXIucnVuKDx3YnI+VGhyZWFkUG9vbEV4ZWN1dG9yLmphdmE6NjI0KTxicj4KJmd0OyBhdCBq YXZhLmxhbmcuVGhyZWFkLnJ1bihUaHJlYWQuPHdicj5qYXZhOjc0OCk8YnI+CiZndDs8YnI+CiZn dDsgMTUtTm92LTIwMTcgMTI6MTQ6NTQuNTA5IFNFVkVSRSBbaHR0cC1iaW8tODQ0My1leGVjLTFd PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS48d2JyPlN0YW5kYXJkSG9zdFZhbHZl Lmludm9rZSBFeGNlcHRpb24gUHJvY2Vzc2luZzxicj4KJmd0OyAvY2EvcmVzdC9hY2NvdW50L2xv Z2luPGJyPgomZ3Q7wqAgPGEgaHJlZj0iaHR0cDovL2phdmF4LndzLnJzIj5qYXZheC53cy5yczwv YT4uPHdicj5TZXJ2aWNlVW5hdmFpbGFibGVFeGNlcHRpb246IFN1YnN5c3RlbSB1bmF2YWlsYWJs ZTxicj4KJmd0OyBhdDxicj4KJmd0OyBjb20ubmV0c2NhcGUuY21zLnRvbWNhdC48d2JyPlByb3h5 UmVhbG0uPHdicj5maW5kU2VjdXJpdHlDb25zdHJhaW50cyg8d2JyPlByb3h5UmVhbG0uamF2YTox MzgpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuPHdicj5hdXRoZW50 aWNhdG9yLjx3YnI+QXV0aGVudGljYXRvckJhc2UuaW52b2tlKDx3YnI+QXV0aGVudGljYXRvckJh c2UuamF2YTo0OTgpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29y ZS48d2JyPlN0YW5kYXJkSG9zdFZhbHZlLmludm9rZSg8d2JyPlN0YW5kYXJkSG9zdFZhbHZlLmph dmE6MTQxKTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLnZhbHZlcy48 d2JyPkVycm9yUmVwb3J0VmFsdmUuaW52b2tlKDx3YnI+RXJyb3JSZXBvcnRWYWx2ZS5qYXZhOjc5 KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLnZhbHZlcy48d2JyPkFi c3RyYWN0QWNjZXNzTG9nVmFsdmUuaW52b2tlKDx3YnI+QWJzdHJhY3RBY2Nlc3NMb2dWYWx2ZS5q YXZhOjx3YnI+NjIwKTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNv cmUuPHdicj5TdGFuZGFyZEVuZ2luZVZhbHZlLmludm9rZSg8d2JyPlN0YW5kYXJkRW5naW5lVmFs dmUuamF2YTo4OCk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS5jb25u ZWN0b3IuPHdicj5Db3lvdGVBZGFwdGVyLnNlcnZpY2UoPHdicj5Db3lvdGVBZGFwdGVyLmphdmE6 NTAyKTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNveW90ZS5odHRwMTEuPHdicj5B YnN0cmFjdEh0dHAxMVByb2Nlc3Nvci48d2JyPnByb2Nlc3MoPHdicj5BYnN0cmFjdEh0dHAxMVBy b2Nlc3Nvci5qYXZhOjx3YnI+MTEzMik8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNoZS5j b3lvdGUuPHdicj5BYnN0cmFjdFByb3RvY29sJDx3YnI+QWJzdHJhY3RDb25uZWN0aW9uSGFuZGxl ci48d2JyPnByb2Nlc3MoQWJzdHJhY3RQcm90b2NvbC5qYXZhOjx3YnI+Njg0KTxicj4KJmd0OyBh dDxicj4KJmd0OyA8YSBocmVmPSJodHRwOi8vb3JnLmFwYWNoZS50b21jYXQudXRpbC5uZXQiPm9y Zy5hcGFjaGUudG9tY2F0LnV0aWwubmV0PC9hPi48d2JyPkpJb0VuZHBvaW50JFNvY2tldFByb2Nl c3Nvci48d2JyPnJ1bihKSW9FbmRwb2ludC5qYXZhOjI4Myk8YnI+CiZndDsgYXQ8YnI+CiZndDsg amF2YS51dGlsLmNvbmN1cnJlbnQuPHdicj5UaHJlYWRQb29sRXhlY3V0b3IucnVuV29ya2VyKDx3 YnI+VGhyZWFkUG9vbEV4ZWN1dG9yLmphdmE6MTE0OSk8YnI+CiZndDsgYXQ8YnI+CiZndDsgamF2 YS51dGlsLmNvbmN1cnJlbnQuPHdicj5UaHJlYWRQb29sRXhlY3V0b3IkV29ya2VyLnJ1big8d2Jy PlRocmVhZFBvb2xFeGVjdXRvci5qYXZhOjYyNCk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFw YWNoZS50b21jYXQudXRpbC48d2JyPnRocmVhZHMuVGFza1RocmVhZCQ8d2JyPldyYXBwaW5nUnVu bmFibGUucnVuKDx3YnI+VGFza1RocmVhZC5qYXZhOjYxKTxicj4KJmd0OyBhdCBqYXZhLmxhbmcu VGhyZWFkLnJ1bihUaHJlYWQuPHdicj5qYXZhOjc0OCk8YnI+CiZndDs8YnI+CiZndDsgMTUtTm92 LTIwMTcgMTM6MDU6NTUuODc0IFNFVkVSRSBbbG9jYWxob3N0LXN0YXJ0U3RvcC0xXTxicj4KJmd0 OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5BcHBsaWNhdGlvbkNvbnRleHQubG9nIFN0 YW5kYXJkV3JhcHBlci5UaHJvd2FibGU8YnI+CiZndDvCoCBqYXZhLmxhbmcuTnVsbFBvaW50ZXJF eGNlcHRpb248YnI+CiZndDsgYXQ8YnI+CiZndDsgY29tLm5ldHNjYXBlLmNtc2NvcmUuPHdicj5z ZWxmdGVzdHMuU2VsZlRlc3RTdWJzeXN0ZW0uPHdicj5zaHV0ZG93bihTZWxmVGVzdFN1YnN5c3Rl bS48d2JyPmphdmE6MTg4Nik8YnI+CiZndDsgYXQ8YnI+CiZndDsgY29tLm5ldHNjYXBlLmNtc2Nv cmUuYXBwcy48d2JyPkNNU0VuZ2luZS5zaHV0ZG93blN1YnN5c3RlbXMoPHdicj5DTVNFbmdpbmUu amF2YToyMTE4KTxicj4KJmd0OyBhdCBjb20ubmV0c2NhcGUuY21zY29yZS5hcHBzLjx3YnI+Q01T RW5naW5lLnNodXRkb3duKENNU0VuZ2luZS48d2JyPmphdmE6MjAxMyk8YnI+CiZndDsgYXQgY29t Lm5ldHNjYXBlLmNlcnRzcnYuYXBwcy5DTVMuPHdicj5zaHV0ZG93bihDTVMuamF2YToyMzQpPGJy PgomZ3Q7IGF0IGNvbS5uZXRzY2FwZS5jZXJ0c3J2LmFwcHMuQ01TLjx3YnI+c3RhcnQoQ01TLmph dmE6MTYzMCk8YnI+CiZndDsgYXQ8YnI+CiZndDsgY29tLm5ldHNjYXBlLmNtcy5zZXJ2bGV0LmJh c2UuPHdicj5DTVNTdGFydFNlcnZsZXQuaW5pdCg8d2JyPkNNU1N0YXJ0U2VydmxldC5qYXZhOjEx NCk8YnI+CiZndDsgYXQgamF2YXguc2VydmxldC5HZW5lcmljU2VydmxldC48d2JyPmluaXQoR2Vu ZXJpY1NlcnZsZXQuamF2YToxNTgpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0 YWxpbmEuY29yZS48d2JyPlN0YW5kYXJkV3JhcHBlci5pbml0U2VydmxldCg8d2JyPlN0YW5kYXJk V3JhcHBlci5qYXZhOjEyMjcpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxp bmEuY29yZS48d2JyPlN0YW5kYXJkV3JhcHBlci5sb2FkU2VydmxldCg8d2JyPlN0YW5kYXJkV3Jh cHBlci5qYXZhOjExNDApPGJyPgomZ3Q7IGF0IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS48d2Jy PlN0YW5kYXJkV3JhcHBlci5sb2FkKDx3YnI+U3RhbmRhcmRXcmFwcGVyLmphdmE6MTAyNyk8YnI+ CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLjx3YnI+U3RhbmRhcmRD b250ZXh0LmxvYWRPblN0YXJ0dXAoPHdicj5TdGFuZGFyZENvbnRleHQuamF2YTo1MDM4KTxicj4K Jmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5TdGFuZGFyZENv bnRleHQuc3RhcnRJbnRlcm5hbCg8d2JyPlN0YW5kYXJkQ29udGV4dC5qYXZhOjUzNDgpPGJyPgom Z3Q7IGF0IG9yZy5hcGFjaGUuY2F0YWxpbmEudXRpbC48d2JyPkxpZmVjeWNsZUJhc2Uuc3RhcnQo PHdicj5MaWZlY3ljbGVCYXNlLmphdmE6MTQ1KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBh Y2hlLmNhdGFsaW5hLmNvcmUuPHdicj5Db250YWluZXJCYXNlLjx3YnI+YWRkQ2hpbGRJbnRlcm5h bCg8d2JyPkNvbnRhaW5lckJhc2UuamF2YTo3NTMpPGJyPgomZ3Q7IGF0IG9yZy5hcGFjaGUuY2F0 YWxpbmEuY29yZS48d2JyPkNvbnRhaW5lckJhc2UuYWRkQ2hpbGQoPHdicj5Db250YWluZXJCYXNl LmphdmE6NzI5KTxicj4KJmd0OyBhdCBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5TdGFu ZGFyZEhvc3QuYWRkQ2hpbGQoPHdicj5TdGFuZGFyZEhvc3QuamF2YTo3MTcpPGJyPgomZ3Q7IGF0 PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuc3RhcnR1cC48d2JyPkhvc3RDb25maWcuZGVw bG95RGVzY3JpcHRvcig8d2JyPkhvc3RDb25maWcuamF2YTo2MjEpPGJyPgomZ3Q7IGF0PGJyPgom Z3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuc3RhcnR1cC48d2JyPkhvc3RDb25maWckRGVwbG95RGVz Y3JpcHRvci48d2JyPnJ1bihIb3N0Q29uZmlnLmphdmE6MTgzNSk8YnI+CiZndDsgYXQgamF2YS51 dGlsLmNvbmN1cnJlbnQuPHdicj5FeGVjdXRvcnMkUnVubmFibGVBZGFwdGVyLjx3YnI+Y2FsbChF eGVjdXRvcnMuamF2YTo1MTEpPGJyPgomZ3Q7IGF0IGphdmEudXRpbC5jb25jdXJyZW50Ljx3YnI+ RnV0dXJlVGFzay5ydW4oRnV0dXJlVGFzay48d2JyPmphdmE6MjY2KTxicj4KJmd0OyBhdDxicj4K Jmd0OyBqYXZhLnV0aWwuY29uY3VycmVudC48d2JyPlRocmVhZFBvb2xFeGVjdXRvci5ydW5Xb3Jr ZXIoPHdicj5UaHJlYWRQb29sRXhlY3V0b3IuamF2YToxMTQ5KTxicj4KJmd0OyBhdDxicj4KJmd0 OyBqYXZhLnV0aWwuY29uY3VycmVudC48d2JyPlRocmVhZFBvb2xFeGVjdXRvciRXb3JrZXIucnVu KDx3YnI+VGhyZWFkUG9vbEV4ZWN1dG9yLmphdmE6NjI0KTxicj4KJmd0OyBhdCBqYXZhLmxhbmcu VGhyZWFkLnJ1bihUaHJlYWQuPHdicj5qYXZhOjc0OCk8YnI+CiZndDs8YnI+CiZndDsgMTUtTm92 LTIwMTcgMTM6MDU6NTUuODc1IFNFVkVSRSBbbG9jYWxob3N0LXN0YXJ0U3RvcC0xXTxicj4KJmd0 OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5TdGFuZGFyZENvbnRleHQubG9hZE9uU3Rh cnR1cCBTZXJ2bGV0IFtjYXN0YXJ0XTxicj4KJmd0OyBpbiB3ZWIgYXBwbGljYXRpb24gWy9jYV0g dGhyZXcgbG9hZCgpIGV4Y2VwdGlvbjxicj4KJmd0O8KgIGphdmEubGFuZy5OdWxsUG9pbnRlckV4 Y2VwdGlvbjxicj4KJmd0OyBhdDxicj4KJmd0OyBjb20ubmV0c2NhcGUuY21zY29yZS48d2JyPnNl bGZ0ZXN0cy5TZWxmVGVzdFN1YnN5c3RlbS48d2JyPnNodXRkb3duKFNlbGZUZXN0U3Vic3lzdGVt Ljx3YnI+amF2YToxODg2KTxicj4KJmd0OyBhdDxicj4KJmd0OyBjb20ubmV0c2NhcGUuY21zY29y ZS5hcHBzLjx3YnI+Q01TRW5naW5lLnNodXRkb3duU3Vic3lzdGVtcyg8d2JyPkNNU0VuZ2luZS5q YXZhOjIxMTgpPGJyPgomZ3Q7IGF0IGNvbS5uZXRzY2FwZS5jbXNjb3JlLmFwcHMuPHdicj5DTVNF bmdpbmUuc2h1dGRvd24oQ01TRW5naW5lLjx3YnI+amF2YToyMDEzKTxicj4KJmd0OyBhdCBjb20u bmV0c2NhcGUuY2VydHNydi5hcHBzLkNNUy48d2JyPnNodXRkb3duKENNUy5qYXZhOjIzNCk8YnI+ CiZndDsgYXQgY29tLm5ldHNjYXBlLmNlcnRzcnYuYXBwcy5DTVMuPHdicj5zdGFydChDTVMuamF2 YToxNjMwKTxicj4KJmd0OyBhdDxicj4KJmd0OyBjb20ubmV0c2NhcGUuY21zLnNlcnZsZXQuYmFz ZS48d2JyPkNNU1N0YXJ0U2VydmxldC5pbml0KDx3YnI+Q01TU3RhcnRTZXJ2bGV0LmphdmE6MTE0 KTxicj4KJmd0OyBhdCBqYXZheC5zZXJ2bGV0LkdlbmVyaWNTZXJ2bGV0Ljx3YnI+aW5pdChHZW5l cmljU2VydmxldC5qYXZhOjE1OCk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRh bGluYS5jb3JlLjx3YnI+U3RhbmRhcmRXcmFwcGVyLmluaXRTZXJ2bGV0KDx3YnI+U3RhbmRhcmRX cmFwcGVyLmphdmE6MTIyNyk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGlu YS5jb3JlLjx3YnI+U3RhbmRhcmRXcmFwcGVyLmxvYWRTZXJ2bGV0KDx3YnI+U3RhbmRhcmRXcmFw cGVyLmphdmE6MTE0MCk8YnI+CiZndDsgYXQgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLjx3YnI+ U3RhbmRhcmRXcmFwcGVyLmxvYWQoPHdicj5TdGFuZGFyZFdyYXBwZXIuamF2YToxMDI3KTxicj4K Jmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5TdGFuZGFyZENv bnRleHQubG9hZE9uU3RhcnR1cCg8d2JyPlN0YW5kYXJkQ29udGV4dC5qYXZhOjUwMzgpPGJyPgom Z3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS48d2JyPlN0YW5kYXJkQ29u dGV4dC5zdGFydEludGVybmFsKDx3YnI+U3RhbmRhcmRDb250ZXh0LmphdmE6NTM0OCk8YnI+CiZn dDsgYXQgb3JnLmFwYWNoZS5jYXRhbGluYS51dGlsLjx3YnI+TGlmZWN5Y2xlQmFzZS5zdGFydCg8 d2JyPkxpZmVjeWNsZUJhc2UuamF2YToxNDUpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFj aGUuY2F0YWxpbmEuY29yZS48d2JyPkNvbnRhaW5lckJhc2UuPHdicj5hZGRDaGlsZEludGVybmFs KDx3YnI+Q29udGFpbmVyQmFzZS5qYXZhOjc1Myk8YnI+CiZndDsgYXQgb3JnLmFwYWNoZS5jYXRh bGluYS5jb3JlLjx3YnI+Q29udGFpbmVyQmFzZS5hZGRDaGlsZCg8d2JyPkNvbnRhaW5lckJhc2Uu amF2YTo3MjkpPGJyPgomZ3Q7IGF0IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS48d2JyPlN0YW5k YXJkSG9zdC5hZGRDaGlsZCg8d2JyPlN0YW5kYXJkSG9zdC5qYXZhOjcxNyk8YnI+CiZndDsgYXQ8 YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS5zdGFydHVwLjx3YnI+SG9zdENvbmZpZy5kZXBs b3lEZXNjcmlwdG9yKDx3YnI+SG9zdENvbmZpZy5qYXZhOjYyMSk8YnI+CiZndDsgYXQ8YnI+CiZn dDsgb3JnLmFwYWNoZS5jYXRhbGluYS5zdGFydHVwLjx3YnI+SG9zdENvbmZpZyREZXBsb3lEZXNj cmlwdG9yLjx3YnI+cnVuKEhvc3RDb25maWcuamF2YToxODM1KTxicj4KJmd0OyBhdCBqYXZhLnV0 aWwuY29uY3VycmVudC48d2JyPkV4ZWN1dG9ycyRSdW5uYWJsZUFkYXB0ZXIuPHdicj5jYWxsKEV4 ZWN1dG9ycy5qYXZhOjUxMSk8YnI+CiZndDsgYXQgamF2YS51dGlsLmNvbmN1cnJlbnQuPHdicj5G dXR1cmVUYXNrLnJ1bihGdXR1cmVUYXNrLjx3YnI+amF2YToyNjYpPGJyPgomZ3Q7IGF0PGJyPgom Z3Q7IGphdmEudXRpbC5jb25jdXJyZW50Ljx3YnI+VGhyZWFkUG9vbEV4ZWN1dG9yLnJ1bldvcmtl cig8d2JyPlRocmVhZFBvb2xFeGVjdXRvci5qYXZhOjExNDkpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7 IGphdmEudXRpbC5jb25jdXJyZW50Ljx3YnI+VGhyZWFkUG9vbEV4ZWN1dG9yJFdvcmtlci5ydW4o PHdicj5UaHJlYWRQb29sRXhlY3V0b3IuamF2YTo2MjQpPGJyPgomZ3Q7IGF0IGphdmEubGFuZy5U aHJlYWQucnVuKFRocmVhZC48d2JyPmphdmE6NzQ4KTxicj4KJmd0Ozxicj4KJmd0OyAxNS1Ob3Yt MjAxNyAxMzowNTo1OS43MDYgU0VWRVJFIFtodHRwLWJpby04NDQzLWV4ZWMtMV08YnI+CiZndDsg b3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLjx3YnI+U3RhbmRhcmRIb3N0VmFsdmUuaW52b2tlIEV4 Y2VwdGlvbiBQcm9jZXNzaW5nPGJyPgomZ3Q7IC9jYS9yZXN0L2FjY291bnQvbG9naW48YnI+CiZn dDvCoCA8YSBocmVmPSJodHRwOi8vamF2YXgud3MucnMiPmphdmF4LndzLnJzPC9hPi48d2JyPlNl cnZpY2VVbmF2YWlsYWJsZUV4Y2VwdGlvbjogU3Vic3lzdGVtIHVuYXZhaWxhYmxlPGJyPgomZ3Q7 IGF0PGJyPgomZ3Q7IGNvbS5uZXRzY2FwZS5jbXMudG9tY2F0Ljx3YnI+UHJveHlSZWFsbS48d2Jy PmZpbmRTZWN1cml0eUNvbnN0cmFpbnRzKDx3YnI+UHJveHlSZWFsbS5qYXZhOjEzOCk8YnI+CiZn dDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS48d2JyPmF1dGhlbnRpY2F0b3IuPHdi cj5BdXRoZW50aWNhdG9yQmFzZS5pbnZva2UoPHdicj5BdXRoZW50aWNhdG9yQmFzZS5qYXZhOjQ5 OCk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLjx3YnI+U3Rh bmRhcmRIb3N0VmFsdmUuaW52b2tlKDx3YnI+U3RhbmRhcmRIb3N0VmFsdmUuamF2YToxNDEpPGJy PgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEudmFsdmVzLjx3YnI+RXJyb3JS ZXBvcnRWYWx2ZS5pbnZva2UoPHdicj5FcnJvclJlcG9ydFZhbHZlLmphdmE6NzkpPGJyPgomZ3Q7 IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEudmFsdmVzLjx3YnI+QWJzdHJhY3RBY2Nl c3NMb2dWYWx2ZS5pbnZva2UoPHdicj5BYnN0cmFjdEFjY2Vzc0xvZ1ZhbHZlLmphdmE6PHdicj42 MjApPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS48d2JyPlN0 YW5kYXJkRW5naW5lVmFsdmUuaW52b2tlKDx3YnI+U3RhbmRhcmRFbmdpbmVWYWx2ZS5qYXZhOjg4 KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvbm5lY3Rvci48d2Jy PkNveW90ZUFkYXB0ZXIuc2VydmljZSg8d2JyPkNveW90ZUFkYXB0ZXIuamF2YTo1MDIpPGJyPgom Z3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY295b3RlLmh0dHAxMS48d2JyPkFic3RyYWN0SHR0 cDExUHJvY2Vzc29yLjx3YnI+cHJvY2Vzcyg8d2JyPkFic3RyYWN0SHR0cDExUHJvY2Vzc29yLmph dmE6PHdicj4xMTMyKTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNveW90ZS48d2Jy PkFic3RyYWN0UHJvdG9jb2wkPHdicj5BYnN0cmFjdENvbm5lY3Rpb25IYW5kbGVyLjx3YnI+cHJv Y2VzcyhBYnN0cmFjdFByb3RvY29sLmphdmE6PHdicj42ODQpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7 IDxhIGhyZWY9Imh0dHA6Ly9vcmcuYXBhY2hlLnRvbWNhdC51dGlsLm5ldCI+b3JnLmFwYWNoZS50 b21jYXQudXRpbC5uZXQ8L2E+Ljx3YnI+SklvRW5kcG9pbnQkU29ja2V0UHJvY2Vzc29yLjx3YnI+ cnVuKEpJb0VuZHBvaW50LmphdmE6MjgzKTxicj4KJmd0OyBhdDxicj4KJmd0OyBqYXZhLnV0aWwu Y29uY3VycmVudC48d2JyPlRocmVhZFBvb2xFeGVjdXRvci5ydW5Xb3JrZXIoPHdicj5UaHJlYWRQ b29sRXhlY3V0b3IuamF2YToxMTQ5KTxicj4KJmd0OyBhdDxicj4KJmd0OyBqYXZhLnV0aWwuY29u Y3VycmVudC48d2JyPlRocmVhZFBvb2xFeGVjdXRvciRXb3JrZXIucnVuKDx3YnI+VGhyZWFkUG9v bEV4ZWN1dG9yLmphdmE6NjI0KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLnRvbWNh dC51dGlsLjx3YnI+dGhyZWFkcy5UYXNrVGhyZWFkJDx3YnI+V3JhcHBpbmdSdW5uYWJsZS5ydW4o PHdicj5UYXNrVGhyZWFkLmphdmE6NjEpPGJyPgomZ3Q7IGF0IGphdmEubGFuZy5UaHJlYWQucnVu KFRocmVhZC48d2JyPmphdmE6NzQ4KTxicj4KJmd0Ozxicj4KJmd0Ozxicj4KJmd0OyBPbiAxNSBO b3ZlbWJlciAyMDE3IGF0IDEzOjIzLCBEYXZpZCBIYXJ2ZXkgJmx0OzxhIGhyZWY9Im1haWx0bzpk YXZpZGNoYXJ2ZXlAZ29vZ2xlbWFpbC5jb20iPmRhdmlkY2hhcnZleUBnb29nbGVtYWlsLmNvbTwv YT48YnI+CjwvZGl2PjxkaXYgY2xhc3M9ImVsaWRlZC10ZXh0Ij4mZ3Q7ICZsdDttYWlsdG86PGEg aHJlZj0ibWFpbHRvOmRhdmlkY2hhcnZleUBnb29nbGVtYWlsLmNvbSI+ZGF2aWRjaGFydmV5QDx3 YnI+Z29vZ2xlbWFpbC5jb208L2E+Jmd0OyZndDsgd3JvdGU6PGJyPgomZ3Q7PGJyPgomZ3Q7wqAg wqAgwqBIaSB3aXNkb20gb2YgdGhlIGxpc3QsPGJyPgomZ3Q7PGJyPgomZ3Q7wqAgwqAgwqBJIGtu b3cgSSBhbSBhbiBlZGdlIGNhc2Ugd2l0aCBydW5uaW5nIG9uIHVidW50dSwgYnV0IGhvcGVkIHNv bWVvbmU8YnI+CiZndDvCoCDCoCDCoG1pZ2h0IGJlIGFibGUgdG8gc2hlZCBzb21lIGxpZ2h0Ljxi cj4KJmd0Ozxicj4KJmd0O8KgIMKgIMKgQSBiaXQgb2YgYmFja2dyb3VuZC7CoCBJJiMzOTttIHRy eWluZyB0byB0ZXN0IHVwZ3JhZGVzIHdpdGhvdXQ8YnI+CiZndDvCoCDCoCDCoHBvdGVudGlhbGx5 IGhvc2luZyBteSBleGlzdGluZyBzZXJ2aWNlcywgc28gSSBoYXZlIGNsb25lZCB0aGUgVk0sPGJy PgomZ3Q7wqAgwqAgwqBnaXZlbiBpdCBhIG5ldyBJUCBhZGRyZXNzLCB1cGRhdGVkIGhvc3RzIGZp bGUgYW5kIHBvaW50ZWQgRE5TPGJyPgomZ3Q7wqAgwqAgwqBzb21ld2hlcmUgdGhhdCBkb2VzbiYj Mzk7dCBrbm93IGFib3V0IHRoZSByZWFsIElQQSBzZXJ2aWNlcyAoOC44LjguOCkgc288YnI+CiZn dDvCoCDCoCDCoGl0IHdvbiYjMzk7dCB0cnkgYW5kIHN5bmMgb3IgcmVwbGljYXRlLjxicj4KJmd0 Ozxicj4KJmd0O8KgIMKgIMKgQXR0ZW1wdGluZyB0byB1cGdyYWRlIGhpdHMgYSBzbmFncyBvciB0 d28sIHNvbWUgZGVzY3JpYmVkIGluIGJ1Z3M8YnI+CiZndDvCoCDCoCDCoGFscmVhZHkgbGlrZSB0 aGUgcGtpIHZlcnNpb24gbnVtYmVyIGNvbmZ1c2luZyB0aGUgYXB0PGJyPgomZ3Q7wqAgwqAgwqBz Y3JpcHRzIDxhIGhyZWY9Imh0dHBzOi8vYnVncy5sYXVuY2hwYWQubmV0L3VidW50dS8rc291cmNl L2ZyZWVpcGEvK2J1Zy8xNzAzMDUxIiByZWw9Im5vcmVmZXJyZXIiIHRhcmdldD0iX2JsYW5rIj5o dHRwczovL2J1Z3MubGF1bmNocGFkLm5ldC88d2JyPnVidW50dS8rc291cmNlL2ZyZWVpcGEvK2J1 Zy88d2JyPjE3MDMwNTE8L2E+PGJyPgomZ3Q7wqAgwqAgwqAmbHQ7PGEgaHJlZj0iaHR0cHM6Ly9i dWdzLmxhdW5jaHBhZC5uZXQvdWJ1bnR1Lytzb3VyY2UvZnJlZWlwYS8rYnVnLzE3MDMwNTEiIHJl bD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vYnVncy5sYXVuY2hwYWQubmV0 Lzx3YnI+dWJ1bnR1Lytzb3VyY2UvZnJlZWlwYS8rYnVnLzx3YnI+MTcwMzA1MTwvYT4mZ3Q7ICku PGJyPgomZ3Q7wqAgwqAgwqBUaGUgb25lIEkgY2FuJiMzOTt0IHdvcmsgYXJvdW5kIGhvd2V2ZXIg aXMgYmVsb3cuPGJyPgomZ3Q7PGJyPgomZ3Q7wqAgwqAgwqBJdCBzZWVtcyBkZWVwbHkgdW5oYXBw eSwgYW5kIHJlc3RhcnRpbmcgdGhlIHNlcnZpY2VzIHJlc3VsdCBpbiB0aGU8YnI+CiZndDvCoCDC oCDCoGRvZ3RhZy1wa2kgd2ViIHBhZ2UgYmVpbmcgYXZhaWxhYmxlIHVudGlsIGEgbG9naW4gYXR0 ZW1wdCBpcyBtYWRlPGJyPgomZ3Q7wqAgwqAgwqAoYXMgb2NjdXJzIGR1cmluZyB0aGUgaXBhLXNl cnZlci11cGdyYWRlKSBhZnRlciB3aGljaCBwb2ludCBpdCBib21iczxicj4KJmd0O8KgIMKgIMKg d2l0aCBhIDUwMCBlcnJvci48YnI+CiZndDs8YnI+CiZndDvCoCDCoCDCoENvdWxkIHRoZSBiZWxv dyBjYXVzZWQ8YnI+CiZndDvCoCDCoCDCoGJ5IDxhIGhyZWY9Imh0dHBzOi8vYnVncy5sYXVuY2hw YWQubmV0L3VidW50dS8rc291cmNlL2ZyZWVpcGEvK2J1Zy8xNzE2ODQyIiByZWw9Im5vcmVmZXJy ZXIiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL2J1Z3MubGF1bmNocGFkLm5ldC88d2JyPnVidW50 dS8rc291cmNlL2ZyZWVpcGEvK2J1Zy88d2JyPjE3MTY4NDI8L2E+PGJyPgomZ3Q7wqAgwqAgwqAm bHQ7PGEgaHJlZj0iaHR0cHM6Ly9idWdzLmxhdW5jaHBhZC5uZXQvdWJ1bnR1Lytzb3VyY2UvZnJl ZWlwYS8rYnVnLzE3MTY4NDIiIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBz Oi8vYnVncy5sYXVuY2hwYWQubmV0Lzx3YnI+dWJ1bnR1Lytzb3VyY2UvZnJlZWlwYS8rYnVnLzx3 YnI+MTcxNjg0MjwvYT4mZ3Q7ID88YnI+CiZndDs8YnI+CiZndDvCoCDCoCDCoEFueSBhZHZpY2Ug YXBwcmVjaWF0ZWQsIGFzIEkgdGhpbmsgZXZlbiB3aGVuIDE4LjA0IGhpdHMgd2l0aCB0aGU8YnI+ CiZndDvCoCDCoCDCoHByb3Bvc2VkIHVwZGF0ZXMgdG8gcmVseSBvbiB0byB0b21jYXQgOC41LCBJ JiMzOTtsbCBzdGlsbCBuZWVkIHRvPGJyPgomZ3Q7wqAgwqAgwqB1cGdyYWRlIHZpYSAxNy4xMCB3 aGljaCBzZWVtcyBjdXJyZW50bHkgZnJhdWdodCHCoCBJZiBpdCByZWxhdGVzIHRvPGJyPgomZ3Q7 wqAgwqAgwqBteSBtZXRob2Qgb2YgY2xvbmluZyB0aGUgVk0sIGlzIHRoZXJlIGEgYmV0dGVyIHdh eSBvZiB0ZXN0aW5nPGJyPgomZ3Q7wqAgwqAgwqB1cGdyYWRlcyB3aXRob3V0IHBvdGVudGlhbGx5 IGhvc2luZyB0aGUgZXhpc3RpbmcgbGl2ZSBzeXN0ZW1zPzxicj4KJmd0Ozxicj4KJmd0Ozxicj4K Jmd0O8KgIMKgIMKgVGhhbmtzIGluIGFkdmFuY2UsPGJyPgomZ3Q7PGJyPgomZ3Q7wqAgwqAgwqBE YXZpZDxicj4KJmd0Ozxicj4KJmd0O8KgIMKgIMKgMjAxNy0xMS0xNVQxMzowNTo1OVogREVCVUcg YXBwcm92ZWRfdXNhZ2UgPSBTU0wgU2VydmVyPGJyPgomZ3Q7wqAgwqAgwqBpbnRlbmRlZF91c2Fn ZSA9IFNTTCBTZXJ2ZXI8YnI+CiZndDvCoCDCoCDCoDIwMTctMTEtMTVUMTM6MDU6NTlaIERFQlVH IGNlcnQgdmFsaWQgVHJ1ZSBmb3IgJnF1b3Q7Q049PGEgaHJlZj0iaHR0cDovL2lwYTEubXkubmV0 IiByZWw9Im5vcmVmZXJyZXIiIHRhcmdldD0iX2JsYW5rIj5pcGExLm15Lm5ldDwvYT48YnI+Cjwv ZGl2PiZndDvCoCDCoCDCoCZsdDs8YSBocmVmPSJodHRwOi8vaXBhMS5teS5uZXQiIHJlbD0ibm9y ZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsiPmh0dHA6Ly9pcGExLm15Lm5ldDwvYT4mZ3Q7LE89PGEg aHJlZj0iaHR0cDovL1RIT01BQy5ORVQiIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsi PlRIT01BQy48d2JyPk5FVDwvYT4gJmx0OzxhIGhyZWY9Imh0dHA6Ly9USE9NQUMuTkVUIiByZWw9 Im5vcmVmZXJyZXIiIHRhcmdldD0iX2JsYW5rIj5odHRwOi8vVEhPTUFDLk5FVDwvYT4mZ3Q7JnF1 b3Q7PGJyPgo8ZGl2IGNsYXNzPSJlbGlkZWQtdGV4dCI+Jmd0O8KgIMKgIMKgMjAxNy0xMS0xNVQx MzowNTo1OVogREVCVUcgaGFuZHNoYWtlIGNvbXBsZXRlLCBwZWVyID0gSVBBRERSRVNTPGJyPgom Z3Q7wqAgwqAgwqAyMDE3LTExLTE1VDEzOjA1OjU5WiBERUJVRyBQcm90b2NvbDogVExTMS4yPGJy PgomZ3Q7wqAgwqAgwqAyMDE3LTExLTE1VDEzOjA1OjU5WiBERUJVRyBDaXBoZXI6IFRMU19SU0Ff V0lUSF9BRVNfMTI4X0NCQ19TSEE8YnI+CiZndDvCoCDCoCDCoDIwMTctMTEtMTVUMTM6MDU6NTla IERFQlVHIHJlc3BvbnNlIHN0YXR1cyA1MDA8YnI+CiZndDvCoCDCoCDCoDIwMTctMTEtMTVUMTM6 MDU6NTlaIERFQlVHIHJlc3BvbnNlIGhlYWRlcnMgeyYjMzk7Y29udGVudC1sZW5ndGgmIzM5Ozo8 YnI+CiZndDvCoCDCoCDCoCYjMzk7MjI5MiYjMzk7LCAmIzM5O2NvbnRlbnQtbGFuZ3VhZ2UmIzM5 OzogJiMzOTtlbiYjMzk7LCAmIzM5O3NlcnZlciYjMzk7OiAmIzM5O0FwYWNoZS1Db3lvdGUvMS4x JiMzOTssPGJyPgomZ3Q7wqAgwqAgwqAmIzM5O2Nvbm5lY3Rpb24mIzM5OzogJiMzOTtjbG9zZSYj Mzk7LCAmIzM5O2RhdGUmIzM5OzogJiMzOTtXZWQsIDE1IE5vdiAyMDE3IDEzOjA1OjU5IEdNVCYj Mzk7LDxicj4KJmd0O8KgIMKgIMKgJiMzOTtjb250ZW50LXR5cGUmIzM5OzogJiMzOTt0ZXh0L2h0 bWw7Y2hhcnNldD11dGYtOCYjMzk7fTxicj4KJmd0O8KgIMKgIMKgMjAxNy0xMS0xNVQxMzowNTo1 OVogREVCVUcgcmVzcG9uc2UgYm9keSAmIzM5OyZsdDshRE9DVFlQRTxicj4KJmd0O8KgIMKgIMKg aHRtbCZndDsmbHQ7aHRtbCZndDsmbHQ7aGVhZCZndDsmbHQ7dGl0bGUmZ3Q7QXBhY2hlIFRvbWNh dC84LjAuNDYgKFVidW50dSkgLSBFcnJvcjxicj4KJmd0O8KgIMKgIMKgcmVwb3J0Jmx0Oy90aXRs ZSZndDsmbHQ7c3R5bGUgdHlwZT0mcXVvdDt0ZXh0L2NzcyZxdW90OyZndDtIMTxicj4KJmd0O8Kg IMKgIMKge2ZvbnQtZmFtaWx5OlRhaG9tYSxBcmlhbCw8d2JyPnNhbnMtc2VyaWY7Y29sb3I6d2hp dGU7PHdicj5iYWNrZ3JvdW5kLWNvbG9yOiM1MjVENzY7Zm9udC08d2JyPnNpemU6MjJweDt9PGJy PgomZ3Q7wqAgwqAgwqBIMjxicj4KJmd0O8KgIMKgIMKge2ZvbnQtZmFtaWx5OlRhaG9tYSxBcmlh bCw8d2JyPnNhbnMtc2VyaWY7Y29sb3I6d2hpdGU7PHdicj5iYWNrZ3JvdW5kLWNvbG9yOiM1MjVE NzY7Zm9udC08d2JyPnNpemU6MTZweDt9PGJyPgomZ3Q7wqAgwqAgwqBIMzxicj4KJmd0O8KgIMKg IMKge2ZvbnQtZmFtaWx5OlRhaG9tYSxBcmlhbCw8d2JyPnNhbnMtc2VyaWY7Y29sb3I6d2hpdGU7 PHdicj5iYWNrZ3JvdW5kLWNvbG9yOiM1MjVENzY7Zm9udC08d2JyPnNpemU6MTRweDt9PGJyPgom Z3Q7wqAgwqAgwqBCT0RZPGJyPgomZ3Q7wqAgwqAgwqB7Zm9udC1mYW1pbHk6VGFob21hLEFyaWFs LDx3YnI+c2Fucy1zZXJpZjtjb2xvcjpibGFjazs8d2JyPmJhY2tncm91bmQtY29sb3I6d2hpdGU7 fTxicj4KJmd0O8KgIMKgIMKgQjxicj4KJmd0O8KgIMKgIMKge2ZvbnQtZmFtaWx5OlRhaG9tYSxB cmlhbCw8d2JyPnNhbnMtc2VyaWY7Y29sb3I6d2hpdGU7PHdicj5iYWNrZ3JvdW5kLWNvbG9yOiM1 MjVENzY7fTxicj4KJmd0O8KgIMKgIMKgUDxicj4KJmd0O8KgIMKgIMKge2ZvbnQtZmFtaWx5OlRh aG9tYSxBcmlhbCw8d2JyPnNhbnMtc2VyaWY7YmFja2dyb3VuZDp3aGl0ZTs8d2JyPmNvbG9yOmJs YWNrO2ZvbnQtc2l6ZToxMnB4O31BPGJyPgomZ3Q7wqAgwqAgwqB7Y29sb3IgOiBibGFjazt9QS5u YW1lIHtjb2xvciA6IGJsYWNrO30ubGluZSB7aGVpZ2h0OiAxcHg7PGJyPgomZ3Q7wqAgwqAgwqBi YWNrZ3JvdW5kLWNvbG9yOiAjNTI1RDc2OyBib3JkZXI6IG5vbmU7fSZsdDsvc3R5bGUmZ3Q7PGJy PgomZ3Q7wqAgwqAgwqAmbHQ7L2hlYWQmZ3Q7Jmx0O2JvZHkmZ3Q7Jmx0O2gxJmd0O0hUVFAgU3Rh dHVzIDUwMCAtIFN1YnN5c3RlbSB1bmF2YWlsYWJsZSZsdDsvaDEmZ3Q7Jmx0O2Rpdjxicj4KJmd0 O8KgIMKgIMKgY2xhc3M9JnF1b3Q7bGluZSZxdW90OyZndDsmbHQ7L2RpdiZndDsmbHQ7cCZndDsm bHQ7YiZndDt0eXBlJmx0Ozx3YnI+L2ImZ3Q7IEV4Y2VwdGlvbjxicj4KJmd0O8KgIMKgIMKgcmVw b3J0Jmx0Oy9wJmd0OyZsdDtwJmd0OyZsdDtiJmd0O21lc3NhZ2UmbHQ7L2ImZ3Q7ICZsdDt1Jmd0 O1N1YnN5c3RlbTxicj4KJmd0O8KgIMKgIMKgdW5hdmFpbGFibGUmbHQ7L3UmZ3Q7Jmx0Oy9wJmd0 OyZsdDtwJmd0OyZsdDtiJmd0Ozx3YnI+ZGVzY3JpcHRpb24mbHQ7L2ImZ3Q7ICZsdDt1Jmd0O1Ro ZSBzZXJ2ZXIgZW5jb3VudGVyZWQ8YnI+CiZndDvCoCDCoCDCoGFuIGludGVybmFsIGVycm9yIHRo YXQgcHJldmVudGVkIGl0IGZyb20gZnVsZmlsbGluZyB0aGlzPGJyPgomZ3Q7wqAgwqAgwqByZXF1 ZXN0LiZsdDsvdSZndDsmbHQ7L3AmZ3Q7Jmx0O3AmZ3Q7Jmx0O2ImZ3Q7PHdicj5leGNlcHRpb24m bHQ7L2ImZ3Q7Jmx0Oy9wJmd0OyZsdDtwcmUmZ3Q7PGEgaHJlZj0iaHR0cDovL2phdmF4LndzLnJz IiByZWw9Im5vcmVmZXJyZXIiIHRhcmdldD0iX2JsYW5rIj5qYXZheC48d2JyPndzLnJzPC9hPjxi cj4KPC9kaXY+Jmd0O8KgIMKgIMKgJmx0OzxhIGhyZWY9Imh0dHA6Ly93cy5ycyIgcmVsPSJub3Jl ZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+aHR0cDovL3dzLnJzPC9hPiZndDsuPHdicj5TZXJ2aWNl VW5hdmFpbGFibGVFeGNlcHRpb246IFN1YnN5c3RlbTxicj4KPGRpdiBjbGFzcz0iZWxpZGVkLXRl eHQiPiZndDvCoCDCoCDCoHVuYXZhaWxhYmxlXG5cdGNvbS5uZXRzY2FwZS48d2JyPmNtcy50b21j YXQuUHJveHlSZWFsbS48d2JyPmZpbmRTZWN1cml0eUNvbnN0cmFpbnRzKDx3YnI+UHJveHlSZWFs bS5qYXZhOjEzOClcblx0b3JnLjx3YnI+YXBhY2hlLmNhdGFsaW5hLmF1dGhlbnRpY2F0b3IuPHdi cj5BdXRoZW50aWNhdG9yQmFzZS5pbnZva2UoPHdicj5BdXRoZW50aWNhdG9yQmFzZS5qYXZhOjQ5 OClcblw8d2JyPnRvcmcuYXBhY2hlLmNhdGFsaW5hLnZhbHZlcy48d2JyPkVycm9yUmVwb3J0VmFs dmUuaW52b2tlKDx3YnI+RXJyb3JSZXBvcnRWYWx2ZS5qYXZhOjc5KVxuXDx3YnI+dG9yZy5hcGFj aGUuY2F0YWxpbmEudmFsdmVzLjx3YnI+QWJzdHJhY3RBY2Nlc3NMb2dWYWx2ZS5pbnZva2UoPHdi cj5BYnN0cmFjdEFjY2Vzc0xvZ1ZhbHZlLmphdmE6PHdicj42MjApXG5cdG9yZy5hcGFjaGUuY2F0 YWxpbmEuPHdicj5jb25uZWN0b3IuQ295b3RlQWRhcHRlci48d2JyPnNlcnZpY2UoQ295b3RlQWRh cHRlci5qYXZhOjx3YnI+NTAyKVxuXHRvcmcuYXBhY2hlLmNveW90ZS48d2JyPmh0dHAxMS48d2Jy PkFic3RyYWN0SHR0cDExUHJvY2Vzc29yLjx3YnI+cHJvY2Vzcyg8d2JyPkFic3RyYWN0SHR0cDEx UHJvY2Vzc29yLmphdmE6PHdicj4xMTMyKVxuXHRvcmcuYXBhY2hlLmNveW90ZS48d2JyPkFic3Ry YWN0UHJvdG9jb2wkPHdicj5BYnN0cmFjdENvbm5lY3Rpb25IYW5kbGVyLjx3YnI+cHJvY2VzcyhB YnN0cmFjdFByb3RvY29sLmphdmE6PHdicj42ODQpXG5cdG9yZy5hcGFjaGUudG9tY2F0Ljx3YnI+ dXRpbC5uZXQuSklvRW5kcG9pbnQkPHdicj5Tb2NrZXRQcm9jZXNzb3IucnVuKDx3YnI+SklvRW5k cG9pbnQuamF2YToyODMpXG5cdGphdmEuPHdicj51dGlsLmNvbmN1cnJlbnQuPHdicj5UaHJlYWRQ b29sRXhlY3V0b3IucnVuV29ya2VyKDx3YnI+VGhyZWFkUG9vbEV4ZWN1dG9yLmphdmE6MTE0OSlc PHdicj5uXHRqYXZhLnV0aWwuY29uY3VycmVudC48d2JyPlRocmVhZFBvb2xFeGVjdXRvciRXb3Jr ZXIucnVuKDx3YnI+VGhyZWFkUG9vbEV4ZWN1dG9yLmphdmE6NjI0KVw8d2JyPm5cdG9yZy5hcGFj aGUudG9tY2F0LnV0aWwuPHdicj50aHJlYWRzLlRhc2tUaHJlYWQkPHdicj5XcmFwcGluZ1J1bm5h YmxlLnJ1big8d2JyPlRhc2tUaHJlYWQuamF2YTo2MSlcblx0amF2YS48d2JyPmxhbmcuVGhyZWFk LnJ1bihUaHJlYWQuamF2YTo8d2JyPjc0OClcbiZsdDsvcHJlJmd0OyZsdDtwJmd0OyZsdDtiJmd0 O25vdGUmbHQ7L2ImZ3Q7PGJyPgomZ3Q7wqAgwqAgwqAmbHQ7dSZndDtUaGUgZnVsbCBzdGFjayB0 cmFjZSBvZiB0aGUgcm9vdCBjYXVzZSBpcyBhdmFpbGFibGUgaW4gdGhlIEFwYWNoZTxicj4KJmd0 O8KgIMKgIMKgVG9tY2F0LzguMC40NiAoVWJ1bnR1KSBsb2dzLiZsdDsvdSZndDsmbHQ7L3AmZ3Q7 Jmx0O2hyIGNsYXNzPSZxdW90O2xpbmUmcXVvdDsmZ3Q7Jmx0O2gzJmd0O0FwYWNoZTxicj4KJmd0 O8KgIMKgIMKgVG9tY2F0LzguMC40NiAoVWJ1bnR1KSZsdDsvaDMmZ3Q7Jmx0Oy9ib2R5Jmd0OyZs dDsvaHRtbCZndDsmIzM5Ozxicj4KJmd0O8KgIMKgIMKgMjAxNy0xMS0xNVQxMzowNTo1OVogRVJS T1IgSVBBIHNlcnZlciB1cGdyYWRlIGZhaWxlZDogSW5zcGVjdDxicj4KJmd0O8KgIMKgIMKgL3Zh ci9sb2cvaXBhdXBncmFkZS5sb2cgYW5kIHJ1biBjb21tYW5kIGlwYS1zZXJ2ZXItdXBncmFkZSBt YW51YWxseS48YnI+CiZndDvCoCDCoCDCoDIwMTctMTEtMTVUMTM6MDU6NTlaIERFQlVHwqAgwqBG aWxlPGJyPgomZ3Q7wqAgwqAgwqAmcXVvdDsvdXNyL2xpYi9weXRob24yLjcvZGlzdC08d2JyPnBh Y2thZ2VzL2lwYXB5dGhvbi9hZG1pbnRvb2wuPHdicj5weSZxdW90OywgbGluZSAxNzIsPGJyPgom Z3Q7wqAgwqAgwqBpbiBleGVjdXRlPGJyPgomZ3Q7wqAgwqAgwqAgwqAgwqByZXR1cm5fdmFsdWUg PSBzZWxmLnJ1bigpPGJyPgomZ3Q7wqAgwqAgwqAgwqBGaWxlPGJyPgomZ3Q7wqAgwqAgwqAmcXVv dDsvdXNyL2xpYi9weXRob24yLjcvZGlzdC08d2JyPnBhY2thZ2VzL2lwYXNlcnZlci9pbnN0YWxs Lzx3YnI+aXBhX3NlcnZlcl91cGdyYWRlLnB5JnF1b3Q7LDxicj4KJmd0O8KgIMKgIMKgbGluZSA0 NiwgaW4gcnVuPGJyPgomZ3Q7wqAgwqAgwqAgwqAgwqBzZXJ2ZXIudXBncmFkZSgpPGJyPgomZ3Q7 wqAgwqAgwqAgwqBGaWxlPGJyPgomZ3Q7wqAgwqAgwqAmcXVvdDsvdXNyL2xpYi9weXRob24yLjcv ZGlzdC08d2JyPnBhY2thZ2VzL2lwYXNlcnZlci9pbnN0YWxsLzx3YnI+c2VydmVyL3VwZ3JhZGUu cHkmcXVvdDssPGJyPgomZ3Q7wqAgwqAgwqBsaW5lIDE4NzgsIGluIHVwZ3JhZGU8YnI+CiZndDvC oCDCoCDCoCDCoCDCoHVwZ3JhZGVfY29uZmlndXJhdGlvbigpPGJyPgomZ3Q7wqAgwqAgwqAgwqBG aWxlPGJyPgomZ3Q7wqAgwqAgwqAmcXVvdDsvdXNyL2xpYi9weXRob24yLjcvZGlzdC08d2JyPnBh Y2thZ2VzL2lwYXNlcnZlci9pbnN0YWxsLzx3YnI+c2VydmVyL3VwZ3JhZGUucHkmcXVvdDssPGJy PgomZ3Q7wqAgwqAgwqBsaW5lIDE3OTcsIGluIHVwZ3JhZGVfY29uZmlndXJhdGlvbjxicj4KJmd0 O8KgIMKgIMKgIMKgIMKgY2FfZW5hYmxlX2xkYXBfcHJvZmlsZV88d2JyPnN1YnN5c3RlbShjYSk8 YnI+CiZndDvCoCDCoCDCoCDCoEZpbGU8YnI+CiZndDvCoCDCoCDCoCZxdW90Oy91c3IvbGliL3B5 dGhvbjIuNy9kaXN0LTx3YnI+cGFja2FnZXMvaXBhc2VydmVyL2luc3RhbGwvPHdicj5zZXJ2ZXIv dXBncmFkZS5weSZxdW90Oyw8YnI+CiZndDvCoCDCoCDCoGxpbmUgMzQ3LCBpbiBjYV9lbmFibGVf bGRhcF9wcm9maWxlXzx3YnI+c3Vic3lzdGVtPGJyPgomZ3Q7wqAgwqAgwqAgwqAgwqBjYWluc3Rh bmNlLm1pZ3JhdGVfcHJvZmlsZXNfPHdicj50b19sZGFwKCk8YnI+CiZndDvCoCDCoCDCoCDCoEZp bGU8YnI+CiZndDvCoCDCoCDCoCZxdW90Oy91c3IvbGliL3B5dGhvbjIuNy9kaXN0LTx3YnI+cGFj a2FnZXMvaXBhc2VydmVyL2luc3RhbGwvPHdicj5jYWluc3RhbmNlLnB5JnF1b3Q7LDxicj4KJmd0 O8KgIMKgIMKgbGluZSAxOTgxLCBpbiBtaWdyYXRlX3Byb2ZpbGVzX3RvX2xkYXA8YnI+CiZndDvC oCDCoCDCoCDCoCDCoF9jcmVhdGVfZG9ndGFnX3Byb2ZpbGUoPHdicj5wcm9maWxlX2lkLCBwcm9m aWxlX2RhdGEsIG92ZXJ3cml0ZT1GYWxzZSk8YnI+CiZndDvCoCDCoCDCoCDCoEZpbGU8YnI+CiZn dDvCoCDCoCDCoCZxdW90Oy91c3IvbGliL3B5dGhvbjIuNy9kaXN0LTx3YnI+cGFja2FnZXMvaXBh c2VydmVyL2luc3RhbGwvPHdicj5jYWluc3RhbmNlLnB5JnF1b3Q7LDxicj4KJmd0O8KgIMKgIMKg bGluZSAxOTg3LCBpbiBfY3JlYXRlX2RvZ3RhZ19wcm9maWxlPGJyPgomZ3Q7wqAgwqAgwqAgwqAg wqB3aXRoIGFwaS5CYWNrZW5kLnJhX2NlcnRwcm9maWxlIGFzIHByb2ZpbGVfYXBpOjxicj4KJmd0 O8KgIMKgIMKgIMKgRmlsZTxicj4KJmd0O8KgIMKgIMKgJnF1b3Q7L3Vzci9saWIvcHl0aG9uMi43 L2Rpc3QtPHdicj5wYWNrYWdlcy9pcGFzZXJ2ZXIvcGx1Z2lucy88d2JyPmRvZ3RhZy5weSZxdW90 OywgbGluZTxicj4KJmd0O8KgIMKgIMKgMTI5NCwgaW4gX19lbnRlcl9fPGJyPgomZ3Q7wqAgwqAg wqAgwqAgwqByYWlzZSBlcnJvcnMuUmVtb3RlUmV0cmlldmVFcnJvcig8d2JyPnJlYXNvbj1fKCYj Mzk7RmFpbGVkIHRvPGJyPgomZ3Q7wqAgwqAgwqBhdXRoZW50aWNhdGUgdG8gQ0EgUkVTVCBBUEkm IzM5OykpPGJyPgomZ3Q7PGJyPgomZ3Q7wqAgwqAgwqAyMDE3LTExLTE1VDEzOjA1OjU5WiBERUJV RyBUaGUgaXBhLXNlcnZlci11cGdyYWRlIGNvbW1hbmQgZmFpbGVkLDxicj4KJmd0O8KgIMKgIMKg ZXhjZXB0aW9uOiBSZW1vdGVSZXRyaWV2ZUVycm9yOiBGYWlsZWQgdG8gYXV0aGVudGljYXRlIHRv IENBIFJFU1QgQVBJPGJyPgomZ3Q7wqAgwqAgwqAyMDE3LTExLTE1VDEzOjA1OjU5WiBFUlJPUiBV bmV4cGVjdGVkIGVycm9yIC0gc2VlPGJyPgomZ3Q7wqAgwqAgwqAvdmFyL2xvZy9pcGF1cGdyYWRl LmxvZyBmb3IgZGV0YWlsczo8YnI+CiZndDvCoCDCoCDCoFJlbW90ZVJldHJpZXZlRXJyb3I6IEZh aWxlZCB0byBhdXRoZW50aWNhdGUgdG8gQ0EgUkVTVCBBUEk8YnI+CiZndDs8YnI+CiZndDs8YnI+ CiZndDs8YnI+CiZndDs8YnI+CjwvZGl2PjxkaXYgY2xhc3M9ImVsaWRlZC10ZXh0Ij4mZ3Q7IF9f X19fX19fX19fX19fX19fX19fX19fX19fX19fXzx3YnI+X19fX19fX19fX19fX19fX188YnI+CiZn dDsgRnJlZUlQQS11c2VycyBtYWlsaW5nIGxpc3QgLS0gPGEgaHJlZj0ibWFpbHRvOmZyZWVpcGEt dXNlcnNAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZyI+ZnJlZWlwYS11c2Vyc0BsaXN0cy48d2JyPmZl ZG9yYWhvc3RlZC5vcmc8L2E+PGJyPgomZ3Q7IFRvIHVuc3Vic2NyaWJlIHNlbmQgYW4gZW1haWwg dG8gPGEgaHJlZj0ibWFpbHRvOmZyZWVpcGEtdXNlcnMtbGVhdmVAbGlzdHMuZmVkb3JhaG9zdGVk Lm9yZyI+ZnJlZWlwYS11c2Vycy1sZWF2ZUBsaXN0cy48d2JyPmZlZG9yYWhvc3RlZC5vcmc8L2E+ PGJyPgomZ3Q7PGJyPgo8YnI+CjwvZGl2PjwvYmxvY2txdW90ZT48L2Rpdj48YnI+PC9kaXY+PC9k aXY+PC9kaXY+Cg== --===============1511437130801694390==-- From davidcharvey at googlemail.com Fri Nov 17 15:11:31 2017 Content-Type: multipart/mixed; boundary="===============6696494450510794275==" MIME-Version: 1.0 From: David Harvey To: freeipa-users at lists.fedorahosted.org Subject: [Freeipa-users] Re: upgrade to ubuntu 17.10 fails Date: Fri, 17 Nov 2017 15:10:54 +0000 Message-ID: In-Reply-To: CADq_JGpQtkq=fR0CxKiuU3c1x0QQLDzjtryjwRqT70Uw68aBUA@mail.gmail.com --===============6696494450510794275== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Hi again, No joy yet with spotting CA anomalies. Any additional tips there Rob? Gentle bump Simon, are you confident that building a new replica won't fall foul of the below from the upgrade page (the schema part): Words of caution - Note that the server is in a *maintenance mode* during upgrade and does not respond to requests! - Schema or Directory Server database object changes done during the upgrade are replicated to *all FreeIPA masters* Thanks again for the support, David On 15 November 2017 at 16:52, David Harvey wrote: > Thanks Rob, Simon, > > Rob, will check, but thought my cert system was healthy before. It's > relatively new (6months or less), and no sub-ca's involved.. Any specifics > on how to invoke the selftests in some manner that might provide digestib= le > output? Or could it be my dirty hack of cloning and isolation and I should > do as Simon suggested :)? > > Simon. WRT spinning up a replica. I was under the impression that all > running servers had to be of the same version, am I mistaken with that? > I had avoided what you were suggesting as I feared the new server might > update the schema on the existing ones! > > Thanks again, appreciate the steering! > > > On 15 Nov 2017 14:34, "Rob Crittenden" wrote: > > David Harvey via FreeIPA-users wrote: > > Sorry for the dump size, but not sure if the below from > > /var/log/pki/pki-tomcat/localhost.date.log helps: > > Looks like the selftests are failing. I'd check that your CA subsystem > certificates are not expired, etc. > > rob > > > > > 15-Nov-2017 12:14:50.557 SEVERE [localhost-startStop-1] > > org.apache.catalina.core.ApplicationContext.log > StandardWrapper.Throwable > > java.lang.NullPointerException > > at > > com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown( > SelfTestSubsystem.java:1886) > > at > > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEn > gine.java:2118) > > at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) > > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > > at > > com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartS > ervlet.java:114) > > at javax.servlet.GenericServlet.init(GenericServlet.java:158) > > at > > org.apache.catalina.core.StandardWrapper.initServlet(Standar > dWrapper.java:1227) > > at > > org.apache.catalina.core.StandardWrapper.loadServlet(Standar > dWrapper.java:1140) > > at org.apache.catalina.core.StandardWrapper.load(StandardWrappe > r.java:1027) > > at > > org.apache.catalina.core.StandardContext.loadOnStartup(Stand > ardContext.java:5038) > > at > > org.apache.catalina.core.StandardContext.startInternal(Stand > ardContext.java:5348) > > at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) > > at > > org.apache.catalina.core.ContainerBase.addChildInternal(Cont > ainerBase.java:753) > > at org.apache.catalina.core.ContainerBase.addChild(ContainerBas > e.java:729) > > at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:717) > > at > > org.apache.catalina.startup.HostConfig.deployDescriptor(Host > Config.java:621) > > at > > org.apache.catalina.startup.HostConfig$DeployDescriptor.run( > HostConfig.java:1835) > > at java.util.concurrent.Executors$RunnableAdapter.call( > Executors.java:511) > > at java.util.concurrent.FutureTask.run(FutureTask.java:266) > > at > > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool > Executor.java:1149) > > at > > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo > lExecutor.java:624) > > at java.lang.Thread.run(Thread.java:748) > > > > 15-Nov-2017 12:14:50.558 SEVERE [localhost-startStop-1] > > org.apache.catalina.core.StandardContext.loadOnStartup Servlet [castart] > > in web application [/ca] threw load() exception > > java.lang.NullPointerException > > at > > com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown( > SelfTestSubsystem.java:1886) > > at > > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEn > gine.java:2118) > > at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) > > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > > at > > com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartS > ervlet.java:114) > > at javax.servlet.GenericServlet.init(GenericServlet.java:158) > > at > > org.apache.catalina.core.StandardWrapper.initServlet(Standar > dWrapper.java:1227) > > at > > org.apache.catalina.core.StandardWrapper.loadServlet(Standar > dWrapper.java:1140) > > at org.apache.catalina.core.StandardWrapper.load(StandardWrappe > r.java:1027) > > at > > org.apache.catalina.core.StandardContext.loadOnStartup(Stand > ardContext.java:5038) > > at > > org.apache.catalina.core.StandardContext.startInternal(Stand > ardContext.java:5348) > > at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) > > at > > org.apache.catalina.core.ContainerBase.addChildInternal(Cont > ainerBase.java:753) > > at org.apache.catalina.core.ContainerBase.addChild(ContainerBas > e.java:729) > > at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:717) > > at > > org.apache.catalina.startup.HostConfig.deployDescriptor(Host > Config.java:621) > > at > > org.apache.catalina.startup.HostConfig$DeployDescriptor.run( > HostConfig.java:1835) > > at java.util.concurrent.Executors$RunnableAdapter.call( > Executors.java:511) > > at java.util.concurrent.FutureTask.run(FutureTask.java:266) > > at > > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool > Executor.java:1149) > > at > > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo > lExecutor.java:624) > > at java.lang.Thread.run(Thread.java:748) > > > > 15-Nov-2017 12:14:54.509 SEVERE [http-bio-8443-exec-1] > > org.apache.catalina.core.StandardHostValve.invoke Exception Processing > > /ca/rest/account/login > > javax.ws.rs.ServiceUnavailableException: Subsystem unavailable > > at > > com.netscape.cms.tomcat.ProxyRealm.findSecurityConstraints(P > roxyRealm.java:138) > > at > > org.apache.catalina.authenticator.AuthenticatorBase.invoke(A > uthenticatorBase.java:498) > > at > > org.apache.catalina.core.StandardHostValve.invoke(StandardHo > stValve.java:141) > > at > > org.apache.catalina.valves.ErrorReportValve.invoke(ErrorRepo > rtValve.java:79) > > at > > org.apache.catalina.valves.AbstractAccessLogValve.invoke(Abs > tractAccessLogValve.java:620) > > at > > org.apache.catalina.core.StandardEngineValve.invoke(Standard > EngineValve.java:88) > > at > > org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAd > apter.java:502) > > at > > org.apache.coyote.http11.AbstractHttp11Processor.process(Abs > tractHttp11Processor.java:1132) > > at > > org.apache.coyote.AbstractProtocol$AbstractConnectionHandler > .process(AbstractProtocol.java:684) > > at > > org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run( > JIoEndpoint.java:283) > > at > > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool > Executor.java:1149) > > at > > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo > lExecutor.java:624) > > at > > org.apache.tomcat.util.threads.TaskThread$WrappingRunnable. > run(TaskThread.java:61) > > at java.lang.Thread.run(Thread.java:748) > > > > 15-Nov-2017 13:05:55.874 SEVERE [localhost-startStop-1] > > org.apache.catalina.core.ApplicationContext.log > StandardWrapper.Throwable > > java.lang.NullPointerException > > at > > com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown( > SelfTestSubsystem.java:1886) > > at > > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEn > gine.java:2118) > > at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) > > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > > at > > com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartS > ervlet.java:114) > > at javax.servlet.GenericServlet.init(GenericServlet.java:158) > > at > > org.apache.catalina.core.StandardWrapper.initServlet(Standar > dWrapper.java:1227) > > at > > org.apache.catalina.core.StandardWrapper.loadServlet(Standar > dWrapper.java:1140) > > at org.apache.catalina.core.StandardWrapper.load(StandardWrappe > r.java:1027) > > at > > org.apache.catalina.core.StandardContext.loadOnStartup(Stand > ardContext.java:5038) > > at > > org.apache.catalina.core.StandardContext.startInternal(Stand > ardContext.java:5348) > > at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) > > at > > org.apache.catalina.core.ContainerBase.addChildInternal(Cont > ainerBase.java:753) > > at org.apache.catalina.core.ContainerBase.addChild(ContainerBas > e.java:729) > > at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:717) > > at > > org.apache.catalina.startup.HostConfig.deployDescriptor(Host > Config.java:621) > > at > > org.apache.catalina.startup.HostConfig$DeployDescriptor.run( > HostConfig.java:1835) > > at java.util.concurrent.Executors$RunnableAdapter.call( > Executors.java:511) > > at java.util.concurrent.FutureTask.run(FutureTask.java:266) > > at > > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool > Executor.java:1149) > > at > > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo > lExecutor.java:624) > > at java.lang.Thread.run(Thread.java:748) > > > > 15-Nov-2017 13:05:55.875 SEVERE [localhost-startStop-1] > > org.apache.catalina.core.StandardContext.loadOnStartup Servlet [castart] > > in web application [/ca] threw load() exception > > java.lang.NullPointerException > > at > > com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown( > SelfTestSubsystem.java:1886) > > at > > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEn > gine.java:2118) > > at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) > > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > > at > > com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartS > ervlet.java:114) > > at javax.servlet.GenericServlet.init(GenericServlet.java:158) > > at > > org.apache.catalina.core.StandardWrapper.initServlet(Standar > dWrapper.java:1227) > > at > > org.apache.catalina.core.StandardWrapper.loadServlet(Standar > dWrapper.java:1140) > > at org.apache.catalina.core.StandardWrapper.load(StandardWrappe > r.java:1027) > > at > > org.apache.catalina.core.StandardContext.loadOnStartup(Stand > ardContext.java:5038) > > at > > org.apache.catalina.core.StandardContext.startInternal(Stand > ardContext.java:5348) > > at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) > > at > > org.apache.catalina.core.ContainerBase.addChildInternal(Cont > ainerBase.java:753) > > at org.apache.catalina.core.ContainerBase.addChild(ContainerBas > e.java:729) > > at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:717) > > at > > org.apache.catalina.startup.HostConfig.deployDescriptor(Host > Config.java:621) > > at > > org.apache.catalina.startup.HostConfig$DeployDescriptor.run( > HostConfig.java:1835) > > at java.util.concurrent.Executors$RunnableAdapter.call( > Executors.java:511) > > at java.util.concurrent.FutureTask.run(FutureTask.java:266) > > at > > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool > Executor.java:1149) > > at > > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo > lExecutor.java:624) > > at java.lang.Thread.run(Thread.java:748) > > > > 15-Nov-2017 13:05:59.706 SEVERE [http-bio-8443-exec-1] > > org.apache.catalina.core.StandardHostValve.invoke Exception Processing > > /ca/rest/account/login > > javax.ws.rs.ServiceUnavailableException: Subsystem unavailable > > at > > com.netscape.cms.tomcat.ProxyRealm.findSecurityConstraints(P > roxyRealm.java:138) > > at > > org.apache.catalina.authenticator.AuthenticatorBase.invoke(A > uthenticatorBase.java:498) > > at > > org.apache.catalina.core.StandardHostValve.invoke(StandardHo > stValve.java:141) > > at > > org.apache.catalina.valves.ErrorReportValve.invoke(ErrorRepo > rtValve.java:79) > > at > > org.apache.catalina.valves.AbstractAccessLogValve.invoke(Abs > tractAccessLogValve.java:620) > > at > > org.apache.catalina.core.StandardEngineValve.invoke(Standard > EngineValve.java:88) > > at > > org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAd > apter.java:502) > > at > > org.apache.coyote.http11.AbstractHttp11Processor.process(Abs > tractHttp11Processor.java:1132) > > at > > org.apache.coyote.AbstractProtocol$AbstractConnectionHandler > .process(AbstractProtocol.java:684) > > at > > org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run( > JIoEndpoint.java:283) > > at > > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool > Executor.java:1149) > > at > > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo > lExecutor.java:624) > > at > > org.apache.tomcat.util.threads.TaskThread$WrappingRunnable. > run(TaskThread.java:61) > > at java.lang.Thread.run(Thread.java:748) > > > > > > On 15 November 2017 at 13:23, David Harvey > > wrote: > > > > Hi wisdom of the list, > > > > I know I am an edge case with running on ubuntu, but hoped someone > > might be able to shed some light. > > > > A bit of background. I'm trying to test upgrades without > > potentially hosing my existing services, so I have cloned the VM, > > given it a new IP address, updated hosts file and pointed DNS > > somewhere that doesn't know about the real IPA services (8.8.8.8) so > > it won't try and sync or replicate. > > > > Attempting to upgrade hits a snags or two, some described in bugs > > already like the pki version number confusing the apt > > scripts https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/17030 > 51 > > ). > > The one I can't work around however is below. > > > > It seems deeply unhappy, and restarting the services result in the > > dogtag-pki web page being available until a login attempt is made > > (as occurs during the ipa-server-upgrade) after which point it bombs > > with a 500 error. > > > > Could the below caused > > by https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1716842 > > ? > > > > Any advice appreciated, as I think even when 18.04 hits with the > > proposed updates to rely on to tomcat 8.5, I'll still need to > > upgrade via 17.10 which seems currently fraught! If it relates to > > my method of cloning the VM, is there a better way of testing > > upgrades without potentially hosing the existing live systems? > > > > > > Thanks in advance, > > > > David > > > > 2017-11-15T13:05:59Z DEBUG approved_usage =3D SSL Server > > intended_usage =3D SSL Server > > 2017-11-15T13:05:59Z DEBUG cert valid True for "CN=3Dipa1.my.net > > ,O=3DTHOMAC.NET " > > 2017-11-15T13:05:59Z DEBUG handshake complete, peer =3D IPADDRESS > > 2017-11-15T13:05:59Z DEBUG Protocol: TLS1.2 > > 2017-11-15T13:05:59Z DEBUG Cipher: TLS_RSA_WITH_AES_128_CBC_SHA > > 2017-11-15T13:05:59Z DEBUG response status 500 > > 2017-11-15T13:05:59Z DEBUG response headers {'content-length': > > '2292', 'content-language': 'en', 'server': 'Apache-Coyote/1.1', > > 'connection': 'close', 'date': 'Wed, 15 Nov 2017 13:05:59 GMT', > > 'content-type': 'text/html;charset=3Dutf-8'} > > 2017-11-15T13:05:59Z DEBUG response body ' > html>Apache Tomcat/8.0.46 (Ubuntu) - Error > > report > >

HTTP Status 500 - Subsystem unavailable

> class=3D"line">

type Exception > > report

message Subsystem > > unavailable

description The server encountered > > an internal error that prevented it from fulfilling this > > request.

exception

javax.ws.rs
> >     .ServiceUnavailableException: Subsystem
> >     unavailable\n\tcom.netscape.cms.tomcat.ProxyRealm.findSecur
> ityConstraints(ProxyRealm.java:138)\n\torg.apache.
> catalina.authenticator.AuthenticatorBase.invoke(Authenticato
> rBase.java:498)\n\torg.apache.catalina.valves.ErrorReportVal
> ve.invoke(ErrorReportValve.java:79)\n\torg.apache.
> catalina.valves.AbstractAccessLogValve.invoke(AbstractAccess
> LogValve.java:620)\n\torg.apache.catalina.connector.CoyoteAdapter.service(
> CoyoteAdapter.java:502)\n\torg.apache.coyote.http11.Abst
> ractHttp11Processor.process(AbstractHttp11Processor.java:113
> 2)\n\torg.apache.coyote.AbstractProtocol$AbstractConnectionH
> andler.process(AbstractProtocol.java:684)\n\torg.apache.tomcat.util.net.
> JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:283)\n\
> tjava.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoo
> lExecutor.java:1149)\n\tjava.util.concurrent.ThreadPoolExec
> utor$Worker.run(ThreadPoolExecutor.java:624)\n\torg.apache.
> tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)\n\
> tjava.lang.Thread.run(Thread.java:748)\n

note > > The full stack trace of the root cause is available in the Apache > > Tomcat/8.0.46 (Ubuntu) logs.

Apache > > Tomcat/8.0.46 (Ubuntu)

' > > 2017-11-15T13:05:59Z ERROR IPA server upgrade failed: Inspect > > /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. > > 2017-11-15T13:05:59Z DEBUG File > > "/usr/lib/python2.7/dist-packages/ipapython/admintool.py", line 172, > > in execute > > return_value =3D self.run() > > File > > "/usr/lib/python2.7/dist-packages/ipaserver/install/ipa_ > server_upgrade.py", > > line 46, in run > > server.upgrade() > > File > > "/usr/lib/python2.7/dist-packages/ipaserver/install/server/ > upgrade.py", > > line 1878, in upgrade > > upgrade_configuration() > > File > > "/usr/lib/python2.7/dist-packages/ipaserver/install/server/ > upgrade.py", > > line 1797, in upgrade_configuration > > ca_enable_ldap_profile_subsystem(ca) > > File > > "/usr/lib/python2.7/dist-packages/ipaserver/install/server/ > upgrade.py", > > line 347, in ca_enable_ldap_profile_subsystem > > cainstance.migrate_profiles_to_ldap() > > File > > "/usr/lib/python2.7/dist-packages/ipaserver/install/cainstance.py", > > line 1981, in migrate_profiles_to_ldap > > _create_dogtag_profile(profile_id, profile_data, > overwrite=3DFalse) > > File > > "/usr/lib/python2.7/dist-packages/ipaserver/install/cainstance.py", > > line 1987, in _create_dogtag_profile > > with api.Backend.ra_certprofile as profile_api: > > File > > "/usr/lib/python2.7/dist-packages/ipaserver/plugins/dogtag.py", line > > 1294, in __enter__ > > raise errors.RemoteRetrieveError(reason=3D_('Failed to > > authenticate to CA REST API')) > > > > 2017-11-15T13:05:59Z DEBUG The ipa-server-upgrade command failed, > > exception: RemoteRetrieveError: Failed to authenticate to CA REST A= PI > > 2017-11-15T13:05:59Z ERROR Unexpected error - see > > /var/log/ipaupgrade.log for details: > > RemoteRetrieveError: Failed to authenticate to CA REST API > > > > > > > > > > _______________________________________________ > > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > > To unsubscribe send an email to freeipa-users-leave(a)lists.fedo > rahosted.org > > > > > --===============6696494450510794275== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGRpdiBkaXI9Imx0ciI+PGRpdj5IaSBhZ2Fpbiw8L2Rpdj48ZGl2Pjxicj48L2Rpdj5ObyBqb3kg eWV0IHdpdGggc3BvdHRpbmcgQ0EgYW5vbWFsaWVzLiBBbnkgYWRkaXRpb25hbCB0aXBzIHRoZXJl IFJvYj88YnI+PGJyPkdlbnRsZSBidW1wIFNpbW9uLCBhcmUgeW91IGNvbmZpZGVudCB0aGF0IGJ1 aWxkaW5nIGEgbmV3IHJlcGxpY2Egd29uJiMzOTt0IGZhbGwgZm91bCBvZiB0aGUgYmVsb3cgZnJv bSB0aGUgdXBncmFkZSBwYWdlICh0aGUgc2NoZW1hIHBhcnQpOjxkaXY+PGRpdj48YnI+PC9kaXY+ PGRpdj5Xb3JkcyBvZiBjYXV0aW9uPHVsIHN0eWxlPSJwYWRkaW5nOjBweDttYXJnaW46MC4zZW0g MHB4IDBweCAxLjZlbTtjb2xvcjpyZ2IoNDYsNTIsNTQpO2ZvbnQtZmFtaWx5OiZxdW90O1NvdXJj ZSBTYW5zIFBybyZxdW90OyxzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxNHB4Ij48bGkgc3R5bGU9Imxp bmUtaGVpZ2h0OjIwcHgiPk5vdGUgdGhhdCB0aGUgc2VydmVyIGlzIGluIGHCoDxiPm1haW50ZW5h bmNlIG1vZGU8L2I+wqBkdXJpbmcgdXBncmFkZSBhbmQgZG9lcyBub3QgcmVzcG9uZCB0byByZXF1 ZXN0cyE8L2xpPjxsaSBzdHlsZT0ibGluZS1oZWlnaHQ6MjBweCI+U2NoZW1hIG9ywqA8YSBocmVm PSJodHRwczovL3d3dy5mcmVlaXBhLm9yZy9wYWdlL0RpcmVjdG9yeV9TZXJ2ZXIiIHRpdGxlPSJE aXJlY3RvcnkgU2VydmVyIiBzdHlsZT0iY29sb3I6cmdiKDc4LDE1NCw2KTt0ZXh0LWRlY29yYXRp b24tbGluZTpub25lO2ZvbnQtd2VpZ2h0OjYwMCI+RGlyZWN0b3J5IFNlcnZlcjwvYT7CoGRhdGFi YXNlIG9iamVjdCBjaGFuZ2VzIGRvbmUgZHVyaW5nIHRoZSB1cGdyYWRlIGFyZSByZXBsaWNhdGVk IHRvwqA8Yj5hbGwgRnJlZUlQQSBtYXN0ZXJzPC9iPjwvbGk+PC91bD48ZGl2Pjxmb250IGNvbG9y PSIjMmUzNDM2IiBmYWNlPSJTb3VyY2UgU2FucyBQcm8sIHNhbnMtc2VyaWYiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTRweCI+PGI+PGJyPjwvYj48L3NwYW4+PC9mb250PjwvZGl2PjwvZGl2Pjwv ZGl2PlRoYW5rcyBhZ2FpbiBmb3IgdGhlIHN1cHBvcnQsPGRpdj48YnI+PC9kaXY+PGRpdj5EYXZp ZDwvZGl2PjwvZGl2PjxkaXYgY2xhc3M9ImdtYWlsX2V4dHJhIj48YnI+PGRpdiBjbGFzcz0iZ21h aWxfcXVvdGUiPk9uIDE1IE5vdmVtYmVyIDIwMTcgYXQgMTY6NTIsIERhdmlkIEhhcnZleSA8c3Bh biBkaXI9Imx0ciI+Jmx0OzxhIGhyZWY9Im1haWx0bzpkYXZpZGNoYXJ2ZXlAZ29vZ2xlbWFpbC5j b20iIHRhcmdldD0iX2JsYW5rIj5kYXZpZGNoYXJ2ZXlAZ29vZ2xlbWFpbC5jb208L2E+Jmd0Ozwv c3Bhbj4gd3JvdGU6PGJyPjxibG9ja3F1b3RlIGNsYXNzPSJnbWFpbF9xdW90ZSIgc3R5bGU9Im1h cmdpbjowIDAgMCAuOGV4O2JvcmRlci1sZWZ0OjFweCAjY2NjIHNvbGlkO3BhZGRpbmctbGVmdDox ZXgiPjxkaXYgZGlyPSJhdXRvIj48ZGl2PlRoYW5rcyBSb2IsIFNpbW9uLDxkaXYgZGlyPSJhdXRv Ij48YnI+PC9kaXY+PGRpdiBkaXI9ImF1dG8iPlJvYiwgd2lsbCBjaGVjaywgYnV0IHRob3VnaHQg bXkgY2VydCBzeXN0ZW0gd2FzIGhlYWx0aHkgYmVmb3JlLiBJdCYjMzk7cyByZWxhdGl2ZWx5IG5l dyAoNm1vbnRocyBvciBsZXNzKSwgYW5kIG5vIHN1Yi1jYSYjMzk7cyBpbnZvbHZlZC4uIEFueSBz cGVjaWZpY3Mgb24gaG93IHRvIGludm9rZSB0aGUgc2VsZnRlc3RzIGluIHNvbWUgbWFubmVyIHRo YXQgbWlnaHQgcHJvdmlkZSBkaWdlc3RpYmxlIG91dHB1dD8gT3IgY291bGQgaXQgYmUgbXkgZGly dHkgaGFjayBvZiBjbG9uaW5nIGFuZCBpc29sYXRpb24gYW5kIEkgc2hvdWxkIGRvIGFzIFNpbW9u IHN1Z2dlc3RlZCA6KT88L2Rpdj48ZGl2IGRpcj0iYXV0byI+PGJyPjwvZGl2PjxkaXYgZGlyPSJh dXRvIj5TaW1vbi4gV1JUIHNwaW5uaW5nIHVwIGEgcmVwbGljYS4gSSB3YXMgdW5kZXIgdGhlIGlt cHJlc3Npb24gdGhhdCBhbGwgcnVubmluZyBzZXJ2ZXJzIGhhZCB0byBiZSBvZiB0aGUgc2FtZSB2 ZXJzaW9uLCBhbSBJIG1pc3Rha2VuIHdpdGggdGhhdD/CoDwvZGl2PjxkaXYgZGlyPSJhdXRvIj5J IGhhZCBhdm9pZGVkIHdoYXQgeW91IHdlcmUgc3VnZ2VzdGluZyBhcyBJIGZlYXJlZCB0aGUgbmV3 IHNlcnZlciBtaWdodCB1cGRhdGUgdGhlIHNjaGVtYSBvbiB0aGUgZXhpc3Rpbmcgb25lcyE8L2Rp dj48ZGl2IGRpcj0iYXV0byI+PGJyPjwvZGl2PlRoYW5rcyBhZ2FpbiwgYXBwcmVjaWF0ZSB0aGUg c3RlZXJpbmchPGRpdj48ZGl2IGNsYXNzPSJoNSI+PGJyPjxkaXYgY2xhc3M9ImdtYWlsX2V4dHJh Ij48YnI+PGRpdiBjbGFzcz0iZ21haWxfcXVvdGUiPk9uIDE1IE5vdiAyMDE3IDE0OjM0LCAmcXVv dDtSb2IgQ3JpdHRlbmRlbiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJjcml0dGVuQHJlZGhh dC5jb20iIHRhcmdldD0iX2JsYW5rIj5yY3JpdHRlbkByZWRoYXQuY29tPC9hPiZndDsgd3JvdGU6 PGJyIHR5cGU9ImF0dHJpYnV0aW9uIj48YmxvY2txdW90ZSBjbGFzcz0ibV82MzM5MjkxOTkwMjIz MzIyMjRxdW90ZSIgc3R5bGU9Im1hcmdpbjowIDAgMCAuOGV4O2JvcmRlci1sZWZ0OjFweCAjY2Nj IHNvbGlkO3BhZGRpbmctbGVmdDoxZXgiPjxkaXYgY2xhc3M9Im1fNjMzOTI5MTk5MDIyMzMyMjI0 cXVvdGVkLXRleHQiPkRhdmlkIEhhcnZleSB2aWEgRnJlZUlQQS11c2VycyB3cm90ZTo8YnI+CiZn dDsgU29ycnkgZm9yIHRoZSBkdW1wIHNpemUsIGJ1dCBub3Qgc3VyZSBpZiB0aGUgYmVsb3cgZnJv bTxicj4KJmd0OyAvdmFyL2xvZy9wa2kvcGtpLXRvbWNhdC9sb2NhbGg8d2JyPm9zdC5kYXRlLmxv ZyBoZWxwczo8YnI+Cjxicj4KPC9kaXY+TG9va3MgbGlrZSB0aGUgc2VsZnRlc3RzIGFyZSBmYWls aW5nLiBJJiMzOTtkIGNoZWNrIHRoYXQgeW91ciBDQSBzdWJzeXN0ZW08YnI+CmNlcnRpZmljYXRl cyBhcmUgbm90IGV4cGlyZWQsIGV0Yy48YnI+Cjxicj4Kcm9iPGJyPgo8ZGl2IGNsYXNzPSJtXzYz MzkyOTE5OTAyMjMzMjIyNGVsaWRlZC10ZXh0Ij48YnI+CiZndDs8YnI+CiZndDsgMTUtTm92LTIw MTcgMTI6MTQ6NTAuNTU3IFNFVkVSRSBbbG9jYWxob3N0LXN0YXJ0U3RvcC0xXTxicj4KJmd0OyBv cmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuQXBwbGk8d2JyPmNhdGlvbkNvbnRleHQubG9nIFN0YW5k YXJkV3JhcHBlci5UaHJvd2FibGU8YnI+CiZndDvCoCBqYXZhLmxhbmcuTnVsbFBvaW50ZXJFeGNl cHRpb248YnI+CiZndDsgYXQ8YnI+CiZndDsgY29tLm5ldHNjYXBlLmNtc2NvcmUuc2VsZnRlc3Rz PHdicj4uU2VsZlRlc3RTdWJzeXN0ZW0uc2h1dGRvd24oPHdicj5TZWxmVGVzdFN1YnN5c3RlbS5q YXZhOjE4ODYpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGNvbS5uZXRzY2FwZS5jbXNjb3JlLmFwcHMu Q01TRTx3YnI+bmdpbmUuc2h1dGRvd25TdWJzeXN0ZW1zKENNU0VuPHdicj5naW5lLmphdmE6MjEx OCk8YnI+CiZndDsgYXQgY29tLm5ldHNjYXBlLmNtc2NvcmUuYXBwcy5DTVNFPHdicj5uZ2luZS5z aHV0ZG93bihDTVNFbmdpbmUuamF2YTo8d2JyPjIwMTMpPGJyPgomZ3Q7IGF0IGNvbS5uZXRzY2Fw ZS5jZXJ0c3J2LmFwcHMuQ01TLjx3YnI+c2h1dGRvd24oQ01TLmphdmE6MjM0KTxicj4KJmd0OyBh dCBjb20ubmV0c2NhcGUuY2VydHNydi5hcHBzLkNNUy48d2JyPnN0YXJ0KENNUy5qYXZhOjE2MzAp PGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGNvbS5uZXRzY2FwZS5jbXMuc2VydmxldC5iYXNlLjx3YnI+ Q01TU3RhcnRTZXJ2bGV0LmluaXQoQ01TU3RhcnRTPHdicj5lcnZsZXQuamF2YToxMTQpPGJyPgom Z3Q7IGF0IGphdmF4LnNlcnZsZXQuR2VuZXJpY1NlcnZsZXQuaTx3YnI+bml0KEdlbmVyaWNTZXJ2 bGV0LmphdmE6MTU4KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNv cmUuU3RhbmQ8d2JyPmFyZFdyYXBwZXIuaW5pdFNlcnZsZXQoU3RhbmRhcjx3YnI+ZFdyYXBwZXIu amF2YToxMjI3KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUu U3RhbmQ8d2JyPmFyZFdyYXBwZXIubG9hZFNlcnZsZXQoU3RhbmRhcjx3YnI+ZFdyYXBwZXIuamF2 YToxMTQwKTxicj4KJmd0OyBhdCBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuU3RhbmQ8d2JyPmFy ZFdyYXBwZXIubG9hZChTdGFuZGFyZFdyYXBwZTx3YnI+ci5qYXZhOjEwMjcpPGJyPgomZ3Q7IGF0 PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZDx3YnI+YXJkQ29udGV4dC5s b2FkT25TdGFydHVwKFN0YW5kPHdicj5hcmRDb250ZXh0LmphdmE6NTAzOCk8YnI+CiZndDsgYXQ8 YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kPHdicj5hcmRDb250ZXh0LnN0 YXJ0SW50ZXJuYWwoU3RhbmQ8d2JyPmFyZENvbnRleHQuamF2YTo1MzQ4KTxicj4KJmd0OyBhdCBv cmcuYXBhY2hlLmNhdGFsaW5hLnV0aWwuTGlmZWM8d2JyPnljbGVCYXNlLnN0YXJ0KExpZmVjeWNs ZUJhc2UuPHdicj5qYXZhOjE0NSk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRh bGluYS5jb3JlLkNvbnRhPHdicj5pbmVyQmFzZS5hZGRDaGlsZEludGVybmFsKENvbnQ8d2JyPmFp bmVyQmFzZS5qYXZhOjc1Myk8YnI+CiZndDsgYXQgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLkNv bnRhPHdicj5pbmVyQmFzZS5hZGRDaGlsZChDb250YWluZXJCYXM8d2JyPmUuamF2YTo3MjkpPGJy PgomZ3Q7IGF0IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZDx3YnI+YXJkSG9zdC5hZGRD aGlsZChTdGFuZGFyZEhvc3QuPHdicj5qYXZhOjcxNyk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3Jn LmFwYWNoZS5jYXRhbGluYS5zdGFydHVwLkhvPHdicj5zdENvbmZpZy5kZXBsb3lEZXNjcmlwdG9y KEhvc3Q8d2JyPkNvbmZpZy5qYXZhOjYyMSk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNo ZS5jYXRhbGluYS5zdGFydHVwLkhvPHdicj5zdENvbmZpZyREZXBsb3lEZXNjcmlwdG9yLnJ1big8 d2JyPkhvc3RDb25maWcuamF2YToxODM1KTxicj4KJmd0OyBhdCBqYXZhLnV0aWwuY29uY3VycmVu dC5FeGVjdXRvcnM8d2JyPiRSdW5uYWJsZUFkYXB0ZXIuY2FsbCg8d2JyPkV4ZWN1dG9ycy5qYXZh OjUxMSk8YnI+CiZndDsgYXQgamF2YS51dGlsLmNvbmN1cnJlbnQuRnV0dXJlVGFzPHdicj5rLnJ1 bihGdXR1cmVUYXNrLmphdmE6MjY2KTxicj4KJmd0OyBhdDxicj4KJmd0OyBqYXZhLnV0aWwuY29u Y3VycmVudC5UaHJlYWRQb288d2JyPmxFeGVjdXRvci5ydW5Xb3JrZXIoVGhyZWFkUG9vbDx3YnI+ RXhlY3V0b3IuamF2YToxMTQ5KTxicj4KJmd0OyBhdDxicj4KJmd0OyBqYXZhLnV0aWwuY29uY3Vy cmVudC5UaHJlYWRQb288d2JyPmxFeGVjdXRvciRXb3JrZXIucnVuKFRocmVhZFBvbzx3YnI+bEV4 ZWN1dG9yLmphdmE6NjI0KTxicj4KJmd0OyBhdCBqYXZhLmxhbmcuVGhyZWFkLnJ1bihUaHJlYWQu amE8d2JyPnZhOjc0OCk8YnI+CiZndDs8YnI+CiZndDsgMTUtTm92LTIwMTcgMTI6MTQ6NTAuNTU4 IFNFVkVSRSBbbG9jYWxob3N0LXN0YXJ0U3RvcC0xXTxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFs aW5hLmNvcmUuU3RhbmQ8d2JyPmFyZENvbnRleHQubG9hZE9uU3RhcnR1cCBTZXJ2bGV0IFtjYXN0 YXJ0XTxicj4KJmd0OyBpbiB3ZWIgYXBwbGljYXRpb24gWy9jYV0gdGhyZXcgbG9hZCgpIGV4Y2Vw dGlvbjxicj4KJmd0O8KgIGphdmEubGFuZy5OdWxsUG9pbnRlckV4Y2VwdGlvbjxicj4KJmd0OyBh dDxicj4KJmd0OyBjb20ubmV0c2NhcGUuY21zY29yZS5zZWxmdGVzdHM8d2JyPi5TZWxmVGVzdFN1 YnN5c3RlbS5zaHV0ZG93big8d2JyPlNlbGZUZXN0U3Vic3lzdGVtLmphdmE6MTg4Nik8YnI+CiZn dDsgYXQ8YnI+CiZndDsgY29tLm5ldHNjYXBlLmNtc2NvcmUuYXBwcy5DTVNFPHdicj5uZ2luZS5z aHV0ZG93blN1YnN5c3RlbXMoQ01TRW48d2JyPmdpbmUuamF2YToyMTE4KTxicj4KJmd0OyBhdCBj b20ubmV0c2NhcGUuY21zY29yZS5hcHBzLkNNU0U8d2JyPm5naW5lLnNodXRkb3duKENNU0VuZ2lu ZS5qYXZhOjx3YnI+MjAxMyk8YnI+CiZndDsgYXQgY29tLm5ldHNjYXBlLmNlcnRzcnYuYXBwcy5D TVMuPHdicj5zaHV0ZG93bihDTVMuamF2YToyMzQpPGJyPgomZ3Q7IGF0IGNvbS5uZXRzY2FwZS5j ZXJ0c3J2LmFwcHMuQ01TLjx3YnI+c3RhcnQoQ01TLmphdmE6MTYzMCk8YnI+CiZndDsgYXQ8YnI+ CiZndDsgY29tLm5ldHNjYXBlLmNtcy5zZXJ2bGV0LmJhc2UuPHdicj5DTVNTdGFydFNlcnZsZXQu aW5pdChDTVNTdGFydFM8d2JyPmVydmxldC5qYXZhOjExNCk8YnI+CiZndDsgYXQgamF2YXguc2Vy dmxldC5HZW5lcmljU2VydmxldC5pPHdicj5uaXQoR2VuZXJpY1NlcnZsZXQuamF2YToxNTgpPGJy PgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZDx3YnI+YXJk V3JhcHBlci5pbml0U2VydmxldChTdGFuZGFyPHdicj5kV3JhcHBlci5qYXZhOjEyMjcpPGJyPgom Z3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZDx3YnI+YXJkV3Jh cHBlci5sb2FkU2VydmxldChTdGFuZGFyPHdicj5kV3JhcHBlci5qYXZhOjExNDApPGJyPgomZ3Q7 IGF0IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZDx3YnI+YXJkV3JhcHBlci5sb2FkKFN0 YW5kYXJkV3JhcHBlPHdicj5yLmphdmE6MTAyNyk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFw YWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kPHdicj5hcmRDb250ZXh0LmxvYWRPblN0YXJ0dXAoU3Rh bmQ8d2JyPmFyZENvbnRleHQuamF2YTo1MDM4KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBh Y2hlLmNhdGFsaW5hLmNvcmUuU3RhbmQ8d2JyPmFyZENvbnRleHQuc3RhcnRJbnRlcm5hbChTdGFu ZDx3YnI+YXJkQ29udGV4dC5qYXZhOjUzNDgpPGJyPgomZ3Q7IGF0IG9yZy5hcGFjaGUuY2F0YWxp bmEudXRpbC5MaWZlYzx3YnI+eWNsZUJhc2Uuc3RhcnQoTGlmZWN5Y2xlQmFzZS48d2JyPmphdmE6 MTQ1KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuQ29udGE8 d2JyPmluZXJCYXNlLmFkZENoaWxkSW50ZXJuYWwoQ29udDx3YnI+YWluZXJCYXNlLmphdmE6NzUz KTxicj4KJmd0OyBhdCBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuQ29udGE8d2JyPmluZXJCYXNl LmFkZENoaWxkKENvbnRhaW5lckJhczx3YnI+ZS5qYXZhOjcyOSk8YnI+CiZndDsgYXQgb3JnLmFw YWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kPHdicj5hcmRIb3N0LmFkZENoaWxkKFN0YW5kYXJkSG9z dC48d2JyPmphdmE6NzE3KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5h LnN0YXJ0dXAuSG88d2JyPnN0Q29uZmlnLmRlcGxveURlc2NyaXB0b3IoSG9zdDx3YnI+Q29uZmln LmphdmE6NjIxKTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLnN0YXJ0 dXAuSG88d2JyPnN0Q29uZmlnJERlcGxveURlc2NyaXB0b3IucnVuKDx3YnI+SG9zdENvbmZpZy5q YXZhOjE4MzUpPGJyPgomZ3Q7IGF0IGphdmEudXRpbC5jb25jdXJyZW50LkV4ZWN1dG9yczx3YnI+ JFJ1bm5hYmxlQWRhcHRlci5jYWxsKDx3YnI+RXhlY3V0b3JzLmphdmE6NTExKTxicj4KJmd0OyBh dCBqYXZhLnV0aWwuY29uY3VycmVudC5GdXR1cmVUYXM8d2JyPmsucnVuKEZ1dHVyZVRhc2suamF2 YToyNjYpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGphdmEudXRpbC5jb25jdXJyZW50LlRocmVhZFBv bzx3YnI+bEV4ZWN1dG9yLnJ1bldvcmtlcihUaHJlYWRQb29sPHdicj5FeGVjdXRvci5qYXZhOjEx NDkpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGphdmEudXRpbC5jb25jdXJyZW50LlRocmVhZFBvbzx3 YnI+bEV4ZWN1dG9yJFdvcmtlci5ydW4oVGhyZWFkUG9vPHdicj5sRXhlY3V0b3IuamF2YTo2MjQp PGJyPgomZ3Q7IGF0IGphdmEubGFuZy5UaHJlYWQucnVuKFRocmVhZC5qYTx3YnI+dmE6NzQ4KTxi cj4KJmd0Ozxicj4KJmd0OyAxNS1Ob3YtMjAxNyAxMjoxNDo1NC41MDkgU0VWRVJFIFtodHRwLWJp by04NDQzLWV4ZWMtMV08YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kPHdi cj5hcmRIb3N0VmFsdmUuaW52b2tlIEV4Y2VwdGlvbiBQcm9jZXNzaW5nPGJyPgomZ3Q7IC9jYS9y ZXN0L2FjY291bnQvbG9naW48YnI+CiZndDvCoCA8YSBocmVmPSJodHRwOi8vamF2YXgud3MucnMi IHRhcmdldD0iX2JsYW5rIj5qYXZheC53cy5yczwvYT4uU2VydmljZVVuYXZhaWxhYmxlPHdicj5F eGNlcHRpb246IFN1YnN5c3RlbSB1bmF2YWlsYWJsZTxicj4KJmd0OyBhdDxicj4KJmd0OyBjb20u bmV0c2NhcGUuY21zLnRvbWNhdC5Qcm94eVI8d2JyPmVhbG0uZmluZFNlY3VyaXR5Q29uc3RyYWlu dHMoUDx3YnI+cm94eVJlYWxtLmphdmE6MTM4KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBh Y2hlLmNhdGFsaW5hLmF1dGhlbnRpY2E8d2JyPnRvci5BdXRoZW50aWNhdG9yQmFzZS5pbnZva2Uo QTx3YnI+dXRoZW50aWNhdG9yQmFzZS5qYXZhOjQ5OCk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3Jn LmFwYWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kPHdicj5hcmRIb3N0VmFsdmUuaW52b2tlKFN0YW5k YXJkSG88d2JyPnN0VmFsdmUuamF2YToxNDEpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFj aGUuY2F0YWxpbmEudmFsdmVzLkVycjx3YnI+b3JSZXBvcnRWYWx2ZS5pbnZva2UoRXJyb3JSZXBv PHdicj5ydFZhbHZlLmphdmE6NzkpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0 YWxpbmEudmFsdmVzLkFiczx3YnI+dHJhY3RBY2Nlc3NMb2dWYWx2ZS5pbnZva2UoQWJzPHdicj50 cmFjdEFjY2Vzc0xvZ1ZhbHZlLmphdmE6NjIwKTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBh Y2hlLmNhdGFsaW5hLmNvcmUuU3RhbmQ8d2JyPmFyZEVuZ2luZVZhbHZlLmludm9rZShTdGFuZGFy ZDx3YnI+RW5naW5lVmFsdmUuamF2YTo4OCk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNo ZS5jYXRhbGluYS5jb25uZWN0b3IuPHdicj5Db3lvdGVBZGFwdGVyLnNlcnZpY2UoQ295b3RlQWQ8 d2JyPmFwdGVyLmphdmE6NTAyKTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNveW90 ZS5odHRwMTEuQWJzdHI8d2JyPmFjdEh0dHAxMVByb2Nlc3Nvci5wcm9jZXNzKEFiczx3YnI+dHJh Y3RIdHRwMTFQcm9jZXNzb3IuamF2YToxMTMyPHdicj4pPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IG9y Zy5hcGFjaGUuY295b3RlLkFic3RyYWN0UHJvdDx3YnI+b2NvbCRBYnN0cmFjdENvbm5lY3Rpb25I YW5kbGVyPHdicj4ucHJvY2VzcyhBYnN0cmFjdFByb3RvY29sLjx3YnI+amF2YTo2ODQpPGJyPgom Z3Q7IGF0PGJyPgomZ3Q7IDxhIGhyZWY9Imh0dHA6Ly9vcmcuYXBhY2hlLnRvbWNhdC51dGlsLm5l dCIgdGFyZ2V0PSJfYmxhbmsiPm9yZy5hcGFjaGUudG9tY2F0LnV0aWwubmV0PC9hPi5KSW88d2Jy PkVuZHBvaW50JFNvY2tldFByb2Nlc3Nvci5ydW4oPHdicj5KSW9FbmRwb2ludC5qYXZhOjI4Myk8 YnI+CiZndDsgYXQ8YnI+CiZndDsgamF2YS51dGlsLmNvbmN1cnJlbnQuVGhyZWFkUG9vPHdicj5s RXhlY3V0b3IucnVuV29ya2VyKFRocmVhZFBvb2w8d2JyPkV4ZWN1dG9yLmphdmE6MTE0OSk8YnI+ CiZndDsgYXQ8YnI+CiZndDsgamF2YS51dGlsLmNvbmN1cnJlbnQuVGhyZWFkUG9vPHdicj5sRXhl Y3V0b3IkV29ya2VyLnJ1bihUaHJlYWRQb288d2JyPmxFeGVjdXRvci5qYXZhOjYyNCk8YnI+CiZn dDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNoZS50b21jYXQudXRpbC50aHJlYWRzPHdicj4uVGFza1Ro cmVhZCRXcmFwcGluZ1J1bm5hYmxlLjx3YnI+cnVuKFRhc2tUaHJlYWQuamF2YTo2MSk8YnI+CiZn dDsgYXQgamF2YS5sYW5nLlRocmVhZC5ydW4oVGhyZWFkLmphPHdicj52YTo3NDgpPGJyPgomZ3Q7 PGJyPgomZ3Q7IDE1LU5vdi0yMDE3IDEzOjA1OjU1Ljg3NCBTRVZFUkUgW2xvY2FsaG9zdC1zdGFy dFN0b3AtMV08YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLkFwcGxpPHdicj5jYXRp b25Db250ZXh0LmxvZyBTdGFuZGFyZFdyYXBwZXIuVGhyb3dhYmxlPGJyPgomZ3Q7wqAgamF2YS5s YW5nLk51bGxQb2ludGVyRXhjZXB0aW9uPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGNvbS5uZXRzY2Fw ZS5jbXNjb3JlLnNlbGZ0ZXN0czx3YnI+LlNlbGZUZXN0U3Vic3lzdGVtLnNodXRkb3duKDx3YnI+ U2VsZlRlc3RTdWJzeXN0ZW0uamF2YToxODg2KTxicj4KJmd0OyBhdDxicj4KJmd0OyBjb20ubmV0 c2NhcGUuY21zY29yZS5hcHBzLkNNU0U8d2JyPm5naW5lLnNodXRkb3duU3Vic3lzdGVtcyhDTVNF bjx3YnI+Z2luZS5qYXZhOjIxMTgpPGJyPgomZ3Q7IGF0IGNvbS5uZXRzY2FwZS5jbXNjb3JlLmFw cHMuQ01TRTx3YnI+bmdpbmUuc2h1dGRvd24oQ01TRW5naW5lLmphdmE6PHdicj4yMDEzKTxicj4K Jmd0OyBhdCBjb20ubmV0c2NhcGUuY2VydHNydi5hcHBzLkNNUy48d2JyPnNodXRkb3duKENNUy5q YXZhOjIzNCk8YnI+CiZndDsgYXQgY29tLm5ldHNjYXBlLmNlcnRzcnYuYXBwcy5DTVMuPHdicj5z dGFydChDTVMuamF2YToxNjMwKTxicj4KJmd0OyBhdDxicj4KJmd0OyBjb20ubmV0c2NhcGUuY21z LnNlcnZsZXQuYmFzZS48d2JyPkNNU1N0YXJ0U2VydmxldC5pbml0KENNU1N0YXJ0Uzx3YnI+ZXJ2 bGV0LmphdmE6MTE0KTxicj4KJmd0OyBhdCBqYXZheC5zZXJ2bGV0LkdlbmVyaWNTZXJ2bGV0Lmk8 d2JyPm5pdChHZW5lcmljU2VydmxldC5qYXZhOjE1OCk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3Jn LmFwYWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kPHdicj5hcmRXcmFwcGVyLmluaXRTZXJ2bGV0KFN0 YW5kYXI8d2JyPmRXcmFwcGVyLmphdmE6MTIyNyk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFw YWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kPHdicj5hcmRXcmFwcGVyLmxvYWRTZXJ2bGV0KFN0YW5k YXI8d2JyPmRXcmFwcGVyLmphdmE6MTE0MCk8YnI+CiZndDsgYXQgb3JnLmFwYWNoZS5jYXRhbGlu YS5jb3JlLlN0YW5kPHdicj5hcmRXcmFwcGVyLmxvYWQoU3RhbmRhcmRXcmFwcGU8d2JyPnIuamF2 YToxMDI3KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuU3Rh bmQ8d2JyPmFyZENvbnRleHQubG9hZE9uU3RhcnR1cChTdGFuZDx3YnI+YXJkQ29udGV4dC5qYXZh OjUwMzgpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFu ZDx3YnI+YXJkQ29udGV4dC5zdGFydEludGVybmFsKFN0YW5kPHdicj5hcmRDb250ZXh0LmphdmE6 NTM0OCk8YnI+CiZndDsgYXQgb3JnLmFwYWNoZS5jYXRhbGluYS51dGlsLkxpZmVjPHdicj55Y2xl QmFzZS5zdGFydChMaWZlY3ljbGVCYXNlLjx3YnI+amF2YToxNDUpPGJyPgomZ3Q7IGF0PGJyPgom Z3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5Db250YTx3YnI+aW5lckJhc2UuYWRkQ2hpbGRJ bnRlcm5hbChDb250PHdicj5haW5lckJhc2UuamF2YTo3NTMpPGJyPgomZ3Q7IGF0IG9yZy5hcGFj aGUuY2F0YWxpbmEuY29yZS5Db250YTx3YnI+aW5lckJhc2UuYWRkQ2hpbGQoQ29udGFpbmVyQmFz PHdicj5lLmphdmE6NzI5KTxicj4KJmd0OyBhdCBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuU3Rh bmQ8d2JyPmFyZEhvc3QuYWRkQ2hpbGQoU3RhbmRhcmRIb3N0Ljx3YnI+amF2YTo3MTcpPGJyPgom Z3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuc3RhcnR1cC5Ibzx3YnI+c3RDb25m aWcuZGVwbG95RGVzY3JpcHRvcihIb3N0PHdicj5Db25maWcuamF2YTo2MjEpPGJyPgomZ3Q7IGF0 PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuc3RhcnR1cC5Ibzx3YnI+c3RDb25maWckRGVw bG95RGVzY3JpcHRvci5ydW4oPHdicj5Ib3N0Q29uZmlnLmphdmE6MTgzNSk8YnI+CiZndDsgYXQg amF2YS51dGlsLmNvbmN1cnJlbnQuRXhlY3V0b3JzPHdicj4kUnVubmFibGVBZGFwdGVyLmNhbGwo PHdicj5FeGVjdXRvcnMuamF2YTo1MTEpPGJyPgomZ3Q7IGF0IGphdmEudXRpbC5jb25jdXJyZW50 LkZ1dHVyZVRhczx3YnI+ay5ydW4oRnV0dXJlVGFzay5qYXZhOjI2Nik8YnI+CiZndDsgYXQ8YnI+ CiZndDsgamF2YS51dGlsLmNvbmN1cnJlbnQuVGhyZWFkUG9vPHdicj5sRXhlY3V0b3IucnVuV29y a2VyKFRocmVhZFBvb2w8d2JyPkV4ZWN1dG9yLmphdmE6MTE0OSk8YnI+CiZndDsgYXQ8YnI+CiZn dDsgamF2YS51dGlsLmNvbmN1cnJlbnQuVGhyZWFkUG9vPHdicj5sRXhlY3V0b3IkV29ya2VyLnJ1 bihUaHJlYWRQb288d2JyPmxFeGVjdXRvci5qYXZhOjYyNCk8YnI+CiZndDsgYXQgamF2YS5sYW5n LlRocmVhZC5ydW4oVGhyZWFkLmphPHdicj52YTo3NDgpPGJyPgomZ3Q7PGJyPgomZ3Q7IDE1LU5v di0yMDE3IDEzOjA1OjU1Ljg3NSBTRVZFUkUgW2xvY2FsaG9zdC1zdGFydFN0b3AtMV08YnI+CiZn dDsgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kPHdicj5hcmRDb250ZXh0LmxvYWRPblN0 YXJ0dXAgU2VydmxldCBbY2FzdGFydF08YnI+CiZndDsgaW4gd2ViIGFwcGxpY2F0aW9uIFsvY2Fd IHRocmV3IGxvYWQoKSBleGNlcHRpb248YnI+CiZndDvCoCBqYXZhLmxhbmcuTnVsbFBvaW50ZXJF eGNlcHRpb248YnI+CiZndDsgYXQ8YnI+CiZndDsgY29tLm5ldHNjYXBlLmNtc2NvcmUuc2VsZnRl c3RzPHdicj4uU2VsZlRlc3RTdWJzeXN0ZW0uc2h1dGRvd24oPHdicj5TZWxmVGVzdFN1YnN5c3Rl bS5qYXZhOjE4ODYpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGNvbS5uZXRzY2FwZS5jbXNjb3JlLmFw cHMuQ01TRTx3YnI+bmdpbmUuc2h1dGRvd25TdWJzeXN0ZW1zKENNU0VuPHdicj5naW5lLmphdmE6 MjExOCk8YnI+CiZndDsgYXQgY29tLm5ldHNjYXBlLmNtc2NvcmUuYXBwcy5DTVNFPHdicj5uZ2lu ZS5zaHV0ZG93bihDTVNFbmdpbmUuamF2YTo8d2JyPjIwMTMpPGJyPgomZ3Q7IGF0IGNvbS5uZXRz Y2FwZS5jZXJ0c3J2LmFwcHMuQ01TLjx3YnI+c2h1dGRvd24oQ01TLmphdmE6MjM0KTxicj4KJmd0 OyBhdCBjb20ubmV0c2NhcGUuY2VydHNydi5hcHBzLkNNUy48d2JyPnN0YXJ0KENNUy5qYXZhOjE2 MzApPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGNvbS5uZXRzY2FwZS5jbXMuc2VydmxldC5iYXNlLjx3 YnI+Q01TU3RhcnRTZXJ2bGV0LmluaXQoQ01TU3RhcnRTPHdicj5lcnZsZXQuamF2YToxMTQpPGJy PgomZ3Q7IGF0IGphdmF4LnNlcnZsZXQuR2VuZXJpY1NlcnZsZXQuaTx3YnI+bml0KEdlbmVyaWNT ZXJ2bGV0LmphdmE6MTU4KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5h LmNvcmUuU3RhbmQ8d2JyPmFyZFdyYXBwZXIuaW5pdFNlcnZsZXQoU3RhbmRhcjx3YnI+ZFdyYXBw ZXIuamF2YToxMjI3KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNv cmUuU3RhbmQ8d2JyPmFyZFdyYXBwZXIubG9hZFNlcnZsZXQoU3RhbmRhcjx3YnI+ZFdyYXBwZXIu amF2YToxMTQwKTxicj4KJmd0OyBhdCBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuU3RhbmQ8d2Jy PmFyZFdyYXBwZXIubG9hZChTdGFuZGFyZFdyYXBwZTx3YnI+ci5qYXZhOjEwMjcpPGJyPgomZ3Q7 IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZDx3YnI+YXJkQ29udGV4 dC5sb2FkT25TdGFydHVwKFN0YW5kPHdicj5hcmRDb250ZXh0LmphdmE6NTAzOCk8YnI+CiZndDsg YXQ8YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kPHdicj5hcmRDb250ZXh0 LnN0YXJ0SW50ZXJuYWwoU3RhbmQ8d2JyPmFyZENvbnRleHQuamF2YTo1MzQ4KTxicj4KJmd0OyBh dCBvcmcuYXBhY2hlLmNhdGFsaW5hLnV0aWwuTGlmZWM8d2JyPnljbGVCYXNlLnN0YXJ0KExpZmVj eWNsZUJhc2UuPHdicj5qYXZhOjE0NSk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNoZS5j YXRhbGluYS5jb3JlLkNvbnRhPHdicj5pbmVyQmFzZS5hZGRDaGlsZEludGVybmFsKENvbnQ8d2Jy PmFpbmVyQmFzZS5qYXZhOjc1Myk8YnI+CiZndDsgYXQgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3Jl LkNvbnRhPHdicj5pbmVyQmFzZS5hZGRDaGlsZChDb250YWluZXJCYXM8d2JyPmUuamF2YTo3Mjkp PGJyPgomZ3Q7IGF0IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZDx3YnI+YXJkSG9zdC5h ZGRDaGlsZChTdGFuZGFyZEhvc3QuPHdicj5qYXZhOjcxNyk8YnI+CiZndDsgYXQ8YnI+CiZndDsg b3JnLmFwYWNoZS5jYXRhbGluYS5zdGFydHVwLkhvPHdicj5zdENvbmZpZy5kZXBsb3lEZXNjcmlw dG9yKEhvc3Q8d2JyPkNvbmZpZy5qYXZhOjYyMSk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFw YWNoZS5jYXRhbGluYS5zdGFydHVwLkhvPHdicj5zdENvbmZpZyREZXBsb3lEZXNjcmlwdG9yLnJ1 big8d2JyPkhvc3RDb25maWcuamF2YToxODM1KTxicj4KJmd0OyBhdCBqYXZhLnV0aWwuY29uY3Vy cmVudC5FeGVjdXRvcnM8d2JyPiRSdW5uYWJsZUFkYXB0ZXIuY2FsbCg8d2JyPkV4ZWN1dG9ycy5q YXZhOjUxMSk8YnI+CiZndDsgYXQgamF2YS51dGlsLmNvbmN1cnJlbnQuRnV0dXJlVGFzPHdicj5r LnJ1bihGdXR1cmVUYXNrLmphdmE6MjY2KTxicj4KJmd0OyBhdDxicj4KJmd0OyBqYXZhLnV0aWwu Y29uY3VycmVudC5UaHJlYWRQb288d2JyPmxFeGVjdXRvci5ydW5Xb3JrZXIoVGhyZWFkUG9vbDx3 YnI+RXhlY3V0b3IuamF2YToxMTQ5KTxicj4KJmd0OyBhdDxicj4KJmd0OyBqYXZhLnV0aWwuY29u Y3VycmVudC5UaHJlYWRQb288d2JyPmxFeGVjdXRvciRXb3JrZXIucnVuKFRocmVhZFBvbzx3YnI+ bEV4ZWN1dG9yLmphdmE6NjI0KTxicj4KJmd0OyBhdCBqYXZhLmxhbmcuVGhyZWFkLnJ1bihUaHJl YWQuamE8d2JyPnZhOjc0OCk8YnI+CiZndDs8YnI+CiZndDsgMTUtTm92LTIwMTcgMTM6MDU6NTku NzA2IFNFVkVSRSBbaHR0cC1iaW8tODQ0My1leGVjLTFdPGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0 YWxpbmEuY29yZS5TdGFuZDx3YnI+YXJkSG9zdFZhbHZlLmludm9rZSBFeGNlcHRpb24gUHJvY2Vz c2luZzxicj4KJmd0OyAvY2EvcmVzdC9hY2NvdW50L2xvZ2luPGJyPgomZ3Q7wqAgPGEgaHJlZj0i aHR0cDovL2phdmF4LndzLnJzIiB0YXJnZXQ9Il9ibGFuayI+amF2YXgud3MucnM8L2E+LlNlcnZp Y2VVbmF2YWlsYWJsZTx3YnI+RXhjZXB0aW9uOiBTdWJzeXN0ZW0gdW5hdmFpbGFibGU8YnI+CiZn dDsgYXQ8YnI+CiZndDsgY29tLm5ldHNjYXBlLmNtcy50b21jYXQuUHJveHlSPHdicj5lYWxtLmZp bmRTZWN1cml0eUNvbnN0cmFpbnRzKFA8d2JyPnJveHlSZWFsbS5qYXZhOjEzOCk8YnI+CiZndDsg YXQ8YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS5hdXRoZW50aWNhPHdicj50b3IuQXV0aGVu dGljYXRvckJhc2UuaW52b2tlKEE8d2JyPnV0aGVudGljYXRvckJhc2UuamF2YTo0OTgpPGJyPgom Z3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZDx3YnI+YXJkSG9z dFZhbHZlLmludm9rZShTdGFuZGFyZEhvPHdicj5zdFZhbHZlLmphdmE6MTQxKTxicj4KJmd0OyBh dDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLnZhbHZlcy5FcnI8d2JyPm9yUmVwb3J0VmFs dmUuaW52b2tlKEVycm9yUmVwbzx3YnI+cnRWYWx2ZS5qYXZhOjc5KTxicj4KJmd0OyBhdDxicj4K Jmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLnZhbHZlcy5BYnM8d2JyPnRyYWN0QWNjZXNzTG9nVmFs dmUuaW52b2tlKEFiczx3YnI+dHJhY3RBY2Nlc3NMb2dWYWx2ZS5qYXZhOjYyMCk8YnI+CiZndDsg YXQ8YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kPHdicj5hcmRFbmdpbmVW YWx2ZS5pbnZva2UoU3RhbmRhcmQ8d2JyPkVuZ2luZVZhbHZlLmphdmE6ODgpPGJyPgomZ3Q7IGF0 PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29ubmVjdG9yLjx3YnI+Q295b3RlQWRhcHRl ci5zZXJ2aWNlKENveW90ZUFkPHdicj5hcHRlci5qYXZhOjUwMik8YnI+CiZndDsgYXQ8YnI+CiZn dDsgb3JnLmFwYWNoZS5jb3lvdGUuaHR0cDExLkFic3RyPHdicj5hY3RIdHRwMTFQcm9jZXNzb3Iu cHJvY2VzcyhBYnM8d2JyPnRyYWN0SHR0cDExUHJvY2Vzc29yLmphdmE6MTEzMjx3YnI+KTxicj4K Jmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNveW90ZS5BYnN0cmFjdFByb3Q8d2JyPm9jb2wk QWJzdHJhY3RDb25uZWN0aW9uSGFuZGxlcjx3YnI+LnByb2Nlc3MoQWJzdHJhY3RQcm90b2NvbC48 d2JyPmphdmE6Njg0KTxicj4KJmd0OyBhdDxicj4KJmd0OyA8YSBocmVmPSJodHRwOi8vb3JnLmFw YWNoZS50b21jYXQudXRpbC5uZXQiIHRhcmdldD0iX2JsYW5rIj5vcmcuYXBhY2hlLnRvbWNhdC51 dGlsLm5ldDwvYT4uSklvPHdicj5FbmRwb2ludCRTb2NrZXRQcm9jZXNzb3IucnVuKDx3YnI+Sklv RW5kcG9pbnQuamF2YToyODMpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGphdmEudXRpbC5jb25jdXJy ZW50LlRocmVhZFBvbzx3YnI+bEV4ZWN1dG9yLnJ1bldvcmtlcihUaHJlYWRQb29sPHdicj5FeGVj dXRvci5qYXZhOjExNDkpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGphdmEudXRpbC5jb25jdXJyZW50 LlRocmVhZFBvbzx3YnI+bEV4ZWN1dG9yJFdvcmtlci5ydW4oVGhyZWFkUG9vPHdicj5sRXhlY3V0 b3IuamF2YTo2MjQpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUudG9tY2F0LnV0aWwu dGhyZWFkczx3YnI+LlRhc2tUaHJlYWQkV3JhcHBpbmdSdW5uYWJsZS48d2JyPnJ1bihUYXNrVGhy ZWFkLmphdmE6NjEpPGJyPgomZ3Q7IGF0IGphdmEubGFuZy5UaHJlYWQucnVuKFRocmVhZC5qYTx3 YnI+dmE6NzQ4KTxicj4KJmd0Ozxicj4KJmd0Ozxicj4KJmd0OyBPbiAxNSBOb3ZlbWJlciAyMDE3 IGF0IDEzOjIzLCBEYXZpZCBIYXJ2ZXkgJmx0OzxhIGhyZWY9Im1haWx0bzpkYXZpZGNoYXJ2ZXlA Z29vZ2xlbWFpbC5jb20iIHRhcmdldD0iX2JsYW5rIj5kYXZpZGNoYXJ2ZXlAZ29vZ2xlbWFpbC5j b208L2E+PGJyPgo8L2Rpdj48ZGl2IGNsYXNzPSJtXzYzMzkyOTE5OTAyMjMzMjIyNGVsaWRlZC10 ZXh0Ij4mZ3Q7ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOmRhdmlkY2hhcnZleUBnb29nbGVt YWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmRhdmlkY2hhcnZleUBnb29nbGVtYWk8d2JyPmwuY29t PC9hPiZndDsmZ3Q7IHdyb3RlOjxicj4KJmd0Ozxicj4KJmd0O8KgIMKgIMKgSGkgd2lzZG9tIG9m IHRoZSBsaXN0LDxicj4KJmd0Ozxicj4KJmd0O8KgIMKgIMKgSSBrbm93IEkgYW0gYW4gZWRnZSBj YXNlIHdpdGggcnVubmluZyBvbiB1YnVudHUsIGJ1dCBob3BlZCBzb21lb25lPGJyPgomZ3Q7wqAg wqAgwqBtaWdodCBiZSBhYmxlIHRvIHNoZWQgc29tZSBsaWdodC48YnI+CiZndDs8YnI+CiZndDvC oCDCoCDCoEEgYml0IG9mIGJhY2tncm91bmQuwqAgSSYjMzk7bSB0cnlpbmcgdG8gdGVzdCB1cGdy YWRlcyB3aXRob3V0PGJyPgomZ3Q7wqAgwqAgwqBwb3RlbnRpYWxseSBob3NpbmcgbXkgZXhpc3Rp bmcgc2VydmljZXMsIHNvIEkgaGF2ZSBjbG9uZWQgdGhlIFZNLDxicj4KJmd0O8KgIMKgIMKgZ2l2 ZW4gaXQgYSBuZXcgSVAgYWRkcmVzcywgdXBkYXRlZCBob3N0cyBmaWxlIGFuZCBwb2ludGVkIERO Uzxicj4KJmd0O8KgIMKgIMKgc29tZXdoZXJlIHRoYXQgZG9lc24mIzM5O3Qga25vdyBhYm91dCB0 aGUgcmVhbCBJUEEgc2VydmljZXMgKDguOC44LjgpIHNvPGJyPgomZ3Q7wqAgwqAgwqBpdCB3b24m IzM5O3QgdHJ5IGFuZCBzeW5jIG9yIHJlcGxpY2F0ZS48YnI+CiZndDs8YnI+CiZndDvCoCDCoCDC oEF0dGVtcHRpbmcgdG8gdXBncmFkZSBoaXRzIGEgc25hZ3Mgb3IgdHdvLCBzb21lIGRlc2NyaWJl ZCBpbiBidWdzPGJyPgomZ3Q7wqAgwqAgwqBhbHJlYWR5IGxpa2UgdGhlIHBraSB2ZXJzaW9uIG51 bWJlciBjb25mdXNpbmcgdGhlIGFwdDxicj4KJmd0O8KgIMKgIMKgc2NyaXB0cyA8YSBocmVmPSJo dHRwczovL2J1Z3MubGF1bmNocGFkLm5ldC91YnVudHUvK3NvdXJjZS9mcmVlaXBhLytidWcvMTcw MzA1MSIgcmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly9idWdzLmxhdW5j aHBhZC5uZXQvdWJ1PHdicj5udHUvK3NvdXJjZS9mcmVlaXBhLytidWcvMTcwMzA8d2JyPjUxPC9h Pjxicj4KJmd0O8KgIMKgIMKgJmx0OzxhIGhyZWY9Imh0dHBzOi8vYnVncy5sYXVuY2hwYWQubmV0 L3VidW50dS8rc291cmNlL2ZyZWVpcGEvK2J1Zy8xNzAzMDUxIiByZWw9Im5vcmVmZXJyZXIiIHRh cmdldD0iX2JsYW5rIj5odHRwczovL2J1Z3MubGF1bmNocGFkLm5ldC91PHdicj5idW50dS8rc291 cmNlL2ZyZWVpcGEvK2J1Zy8xNzA8d2JyPjMwNTE8L2E+Jmd0OyApLjxicj4KJmd0O8KgIMKgIMKg VGhlIG9uZSBJIGNhbiYjMzk7dCB3b3JrIGFyb3VuZCBob3dldmVyIGlzIGJlbG93Ljxicj4KJmd0 Ozxicj4KJmd0O8KgIMKgIMKgSXQgc2VlbXMgZGVlcGx5IHVuaGFwcHksIGFuZCByZXN0YXJ0aW5n IHRoZSBzZXJ2aWNlcyByZXN1bHQgaW4gdGhlPGJyPgomZ3Q7wqAgwqAgwqBkb2d0YWctcGtpIHdl YiBwYWdlIGJlaW5nIGF2YWlsYWJsZSB1bnRpbCBhIGxvZ2luIGF0dGVtcHQgaXMgbWFkZTxicj4K Jmd0O8KgIMKgIMKgKGFzIG9jY3VycyBkdXJpbmcgdGhlIGlwYS1zZXJ2ZXItdXBncmFkZSkgYWZ0 ZXIgd2hpY2ggcG9pbnQgaXQgYm9tYnM8YnI+CiZndDvCoCDCoCDCoHdpdGggYSA1MDAgZXJyb3Iu PGJyPgomZ3Q7PGJyPgomZ3Q7wqAgwqAgwqBDb3VsZCB0aGUgYmVsb3cgY2F1c2VkPGJyPgomZ3Q7 wqAgwqAgwqBieSA8YSBocmVmPSJodHRwczovL2J1Z3MubGF1bmNocGFkLm5ldC91YnVudHUvK3Nv dXJjZS9mcmVlaXBhLytidWcvMTcxNjg0MiIgcmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFu ayI+aHR0cHM6Ly9idWdzLmxhdW5jaHBhZC5uZXQvdWJ1PHdicj5udHUvK3NvdXJjZS9mcmVlaXBh LytidWcvMTcxNjg8d2JyPjQyPC9hPjxicj4KJmd0O8KgIMKgIMKgJmx0OzxhIGhyZWY9Imh0dHBz Oi8vYnVncy5sYXVuY2hwYWQubmV0L3VidW50dS8rc291cmNlL2ZyZWVpcGEvK2J1Zy8xNzE2ODQy IiByZWw9Im5vcmVmZXJyZXIiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL2J1Z3MubGF1bmNocGFk Lm5ldC91PHdicj5idW50dS8rc291cmNlL2ZyZWVpcGEvK2J1Zy8xNzE8d2JyPjY4NDI8L2E+Jmd0 OyA/PGJyPgomZ3Q7PGJyPgomZ3Q7wqAgwqAgwqBBbnkgYWR2aWNlIGFwcHJlY2lhdGVkLCBhcyBJ IHRoaW5rIGV2ZW4gd2hlbiAxOC4wNCBoaXRzIHdpdGggdGhlPGJyPgomZ3Q7wqAgwqAgwqBwcm9w b3NlZCB1cGRhdGVzIHRvIHJlbHkgb24gdG8gdG9tY2F0IDguNSwgSSYjMzk7bGwgc3RpbGwgbmVl ZCB0bzxicj4KJmd0O8KgIMKgIMKgdXBncmFkZSB2aWEgMTcuMTAgd2hpY2ggc2VlbXMgY3VycmVu dGx5IGZyYXVnaHQhwqAgSWYgaXQgcmVsYXRlcyB0bzxicj4KJmd0O8KgIMKgIMKgbXkgbWV0aG9k IG9mIGNsb25pbmcgdGhlIFZNLCBpcyB0aGVyZSBhIGJldHRlciB3YXkgb2YgdGVzdGluZzxicj4K Jmd0O8KgIMKgIMKgdXBncmFkZXMgd2l0aG91dCBwb3RlbnRpYWxseSBob3NpbmcgdGhlIGV4aXN0 aW5nIGxpdmUgc3lzdGVtcz88YnI+CiZndDs8YnI+CiZndDs8YnI+CiZndDvCoCDCoCDCoFRoYW5r cyBpbiBhZHZhbmNlLDxicj4KJmd0Ozxicj4KJmd0O8KgIMKgIMKgRGF2aWQ8YnI+CiZndDs8YnI+ CiZndDvCoCDCoCDCoDIwMTctMTEtMTVUMTM6MDU6NTlaIERFQlVHIGFwcHJvdmVkX3VzYWdlID0g U1NMIFNlcnZlcjxicj4KJmd0O8KgIMKgIMKgaW50ZW5kZWRfdXNhZ2UgPSBTU0wgU2VydmVyPGJy PgomZ3Q7wqAgwqAgwqAyMDE3LTExLTE1VDEzOjA1OjU5WiBERUJVRyBjZXJ0IHZhbGlkIFRydWUg Zm9yICZxdW90O0NOPTxhIGhyZWY9Imh0dHA6Ly9pcGExLm15Lm5ldCIgcmVsPSJub3JlZmVycmVy IiB0YXJnZXQ9Il9ibGFuayI+aXBhMS5teS5uZXQ8L2E+PGJyPgo8L2Rpdj4mZ3Q7wqAgwqAgwqAm bHQ7PGEgaHJlZj0iaHR0cDovL2lwYTEubXkubmV0IiByZWw9Im5vcmVmZXJyZXIiIHRhcmdldD0i X2JsYW5rIj5odHRwOi8vaXBhMS5teS5uZXQ8L2E+Jmd0OyxPPTxhIGhyZWY9Imh0dHA6Ly9USE9N QUMuTkVUIiByZWw9Im5vcmVmZXJyZXIiIHRhcmdldD0iX2JsYW5rIj5USE9NQUM8d2JyPi5ORVQ8 L2E+ICZsdDs8YSBocmVmPSJodHRwOi8vVEhPTUFDLk5FVCIgcmVsPSJub3JlZmVycmVyIiB0YXJn ZXQ9Il9ibGFuayI+aHR0cDovL1RIT01BQy5ORVQ8L2E+Jmd0OyZxdW90Ozxicj4KPGRpdiBjbGFz cz0ibV82MzM5MjkxOTkwMjIzMzIyMjRlbGlkZWQtdGV4dCI+Jmd0O8KgIMKgIMKgMjAxNy0xMS0x NVQxMzowNTo1OVogREVCVUcgaGFuZHNoYWtlIGNvbXBsZXRlLCBwZWVyID0gSVBBRERSRVNTPGJy PgomZ3Q7wqAgwqAgwqAyMDE3LTExLTE1VDEzOjA1OjU5WiBERUJVRyBQcm90b2NvbDogVExTMS4y PGJyPgomZ3Q7wqAgwqAgwqAyMDE3LTExLTE1VDEzOjA1OjU5WiBERUJVRyBDaXBoZXI6IFRMU19S U0FfV0lUSF9BRVNfMTI4X0NCQ19TSEE8YnI+CiZndDvCoCDCoCDCoDIwMTctMTEtMTVUMTM6MDU6 NTlaIERFQlVHIHJlc3BvbnNlIHN0YXR1cyA1MDA8YnI+CiZndDvCoCDCoCDCoDIwMTctMTEtMTVU MTM6MDU6NTlaIERFQlVHIHJlc3BvbnNlIGhlYWRlcnMgeyYjMzk7Y29udGVudC1sZW5ndGgmIzM5 Ozo8YnI+CiZndDvCoCDCoCDCoCYjMzk7MjI5MiYjMzk7LCAmIzM5O2NvbnRlbnQtbGFuZ3VhZ2Um IzM5OzogJiMzOTtlbiYjMzk7LCAmIzM5O3NlcnZlciYjMzk7OiAmIzM5O0FwYWNoZS1Db3lvdGUv MS4xJiMzOTssPGJyPgomZ3Q7wqAgwqAgwqAmIzM5O2Nvbm5lY3Rpb24mIzM5OzogJiMzOTtjbG9z ZSYjMzk7LCAmIzM5O2RhdGUmIzM5OzogJiMzOTtXZWQsIDE1IE5vdiAyMDE3IDEzOjA1OjU5IEdN VCYjMzk7LDxicj4KJmd0O8KgIMKgIMKgJiMzOTtjb250ZW50LXR5cGUmIzM5OzogJiMzOTt0ZXh0 L2h0bWw7Y2hhcnNldD11dGYtOCYjMzk7fTxicj4KJmd0O8KgIMKgIMKgMjAxNy0xMS0xNVQxMzow NTo1OVogREVCVUcgcmVzcG9uc2UgYm9keSAmIzM5OyZsdDshRE9DVFlQRTxicj4KJmd0O8KgIMKg IMKgaHRtbCZndDsmbHQ7aHRtbCZndDsmbHQ7aGVhZCZndDsmbHQ7dGl0bGUmZ3Q7PHdicj5BcGFj aGUgVG9tY2F0LzguMC40NiAoVWJ1bnR1KSAtIEVycm9yPGJyPgomZ3Q7wqAgwqAgwqByZXBvcnQm bHQ7L3RpdGxlJmd0OyZsdDtzdHlsZSB0eXBlPSZxdW90O3RleHQvY3NzJnF1b3Q7Jmd0O0gxPGJy PgomZ3Q7wqAgwqAgwqB7Zm9udC1mYW1pbHk6VGFob21hLEFyaWFsLHNhbjx3YnI+cy1zZXJpZjtj b2xvcjp3aGl0ZTtiYWNrZ3JvdW5kPHdicj4tY29sb3I6IzUyNUQ3Njtmb250LXNpemU6MjJweDs8 d2JyPn08YnI+CiZndDvCoCDCoCDCoEgyPGJyPgomZ3Q7wqAgwqAgwqB7Zm9udC1mYW1pbHk6VGFo b21hLEFyaWFsLHNhbjx3YnI+cy1zZXJpZjtjb2xvcjp3aGl0ZTtiYWNrZ3JvdW5kPHdicj4tY29s b3I6IzUyNUQ3Njtmb250LXNpemU6MTZweDs8d2JyPn08YnI+CiZndDvCoCDCoCDCoEgzPGJyPgom Z3Q7wqAgwqAgwqB7Zm9udC1mYW1pbHk6VGFob21hLEFyaWFsLHNhbjx3YnI+cy1zZXJpZjtjb2xv cjp3aGl0ZTtiYWNrZ3JvdW5kPHdicj4tY29sb3I6IzUyNUQ3Njtmb250LXNpemU6MTRweDs8d2Jy Pn08YnI+CiZndDvCoCDCoCDCoEJPRFk8YnI+CiZndDvCoCDCoCDCoHtmb250LWZhbWlseTpUYWhv bWEsQXJpYWwsc2FuPHdicj5zLXNlcmlmO2NvbG9yOmJsYWNrO2JhY2tncm91bmQ8d2JyPi1jb2xv cjp3aGl0ZTt9PGJyPgomZ3Q7wqAgwqAgwqBCPGJyPgomZ3Q7wqAgwqAgwqB7Zm9udC1mYW1pbHk6 VGFob21hLEFyaWFsLHNhbjx3YnI+cy1zZXJpZjtjb2xvcjp3aGl0ZTtiYWNrZ3JvdW5kPHdicj4t Y29sb3I6IzUyNUQ3Njt9PGJyPgomZ3Q7wqAgwqAgwqBQPGJyPgomZ3Q7wqAgwqAgwqB7Zm9udC1m YW1pbHk6VGFob21hLEFyaWFsLHNhbjx3YnI+cy1zZXJpZjtiYWNrZ3JvdW5kOndoaXRlO2NvbG9y PHdicj46YmxhY2s7Zm9udC1zaXplOjEycHg7fUE8YnI+CiZndDvCoCDCoCDCoHtjb2xvciA6IGJs YWNrO31BLm5hbWUge2NvbG9yIDogYmxhY2s7fS5saW5lIHtoZWlnaHQ6IDFweDs8YnI+CiZndDvC oCDCoCDCoGJhY2tncm91bmQtY29sb3I6ICM1MjVENzY7IGJvcmRlcjogbm9uZTt9Jmx0Oy9zdHls ZSZndDs8YnI+CiZndDvCoCDCoCDCoCZsdDsvaGVhZCZndDsmbHQ7Ym9keSZndDsmbHQ7aDEmZ3Q7 SFRUUCBTdGF0dXMgNTAwIC0gU3Vic3lzdGVtIHVuYXZhaWxhYmxlJmx0Oy9oMSZndDsmbHQ7ZGl2 PGJyPgomZ3Q7wqAgwqAgwqBjbGFzcz0mcXVvdDtsaW5lJnF1b3Q7Jmd0OyZsdDsvZGl2Jmd0OyZs dDtwJmd0OyZsdDtiJmd0Ozx3YnI+dHlwZSZsdDsvYiZndDsgRXhjZXB0aW9uPGJyPgomZ3Q7wqAg wqAgwqByZXBvcnQmbHQ7L3AmZ3Q7Jmx0O3AmZ3Q7Jmx0O2ImZ3Q7bWVzc2FnZSZsdDsvYiZndDsg Jmx0O3UmZ3Q7U3Vic3lzdGVtPGJyPgomZ3Q7wqAgwqAgwqB1bmF2YWlsYWJsZSZsdDsvdSZndDsm bHQ7L3AmZ3Q7Jmx0O3AmZ3Q7Jmx0O2ImZ3Q7ZGVzYzx3YnI+cmlwdGlvbiZsdDsvYiZndDsgJmx0 O3UmZ3Q7VGhlIHNlcnZlciBlbmNvdW50ZXJlZDxicj4KJmd0O8KgIMKgIMKgYW4gaW50ZXJuYWwg ZXJyb3IgdGhhdCBwcmV2ZW50ZWQgaXQgZnJvbSBmdWxmaWxsaW5nIHRoaXM8YnI+CiZndDvCoCDC oCDCoHJlcXVlc3QuJmx0Oy91Jmd0OyZsdDsvcCZndDsmbHQ7cCZndDsmbHQ7YiZndDtleGNlcHRp PHdicj5vbiZsdDsvYiZndDsmbHQ7L3AmZ3Q7Jmx0O3ByZSZndDs8YSBocmVmPSJodHRwOi8vamF2 YXgud3MucnMiIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsiPmphdmF4LndzLnJzPC9h Pjxicj4KPC9kaXY+Jmd0O8KgIMKgIMKgJmx0OzxhIGhyZWY9Imh0dHA6Ly93cy5ycyIgcmVsPSJu b3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+aHR0cDovL3dzLnJzPC9hPiZndDsuU2VydmljZVVu YXZhaWw8d2JyPmFibGVFeGNlcHRpb246IFN1YnN5c3RlbTxicj4KPGRpdiBjbGFzcz0ibV82MzM5 MjkxOTkwMjIzMzIyMjRlbGlkZWQtdGV4dCI+Jmd0O8KgIMKgIMKgdW5hdmFpbGFibGVcblx0Y29t Lm5ldHNjYXBlLmM8d2JyPm1zLnRvbWNhdC5Qcm94eVJlYWxtLmZpbmRTZWN1cjx3YnI+aXR5Q29u c3RyYWludHMoUHJveHlSZWFsbS48d2JyPmphdmE6MTM4KVxuXHRvcmcuYXBhY2hlLjx3YnI+Y2F0 YWxpbmEuYXV0aGVudGljYXRvci5BdXRoZW50PHdicj5pY2F0b3JCYXNlLmludm9rZShBdXRoZW50 aWNhdG88d2JyPnJCYXNlLmphdmE6NDk4KVxuXHRvcmcuYXBhY2hlLjx3YnI+Y2F0YWxpbmEudmFs dmVzLkVycm9yUmVwb3J0VmFsPHdicj52ZS5pbnZva2UoRXJyb3JSZXBvcnRWYWx2ZS48d2JyPmph dmE6NzkpXG5cdG9yZy5hcGFjaGUuPHdicj5jYXRhbGluYS52YWx2ZXMuQWJzdHJhY3RBY2Nlc3M8 d2JyPkxvZ1ZhbHZlLmludm9rZShBYnN0cmFjdEFjY2Vzczx3YnI+TG9nVmFsdmUuamF2YTo2MjAp XG5cdG9yZy48d2JyPmFwYWNoZS5jYXRhbGluYS5jb25uZWN0b3IuPHdicj5Db3lvdGVBZGFwdGVy LnNlcnZpY2UoPHdicj5Db3lvdGVBZGFwdGVyLmphdmE6NTAyKVxuXDx3YnI+dG9yZy5hcGFjaGUu Y295b3RlLmh0dHAxMS5BYnN0PHdicj5yYWN0SHR0cDExUHJvY2Vzc29yLnByb2Nlc3MoQWI8d2Jy PnN0cmFjdEh0dHAxMVByb2Nlc3Nvci5qYXZhOjExMzx3YnI+Milcblx0b3JnLmFwYWNoZS5jb3lv dGUuQWJzdHJhPHdicj5jdFByb3RvY29sJEFic3RyYWN0Q29ubmVjdGlvbkg8d2JyPmFuZGxlci5w cm9jZXNzKDx3YnI+QWJzdHJhY3RQcm90b2NvbC5qYXZhOjY4NClcblw8d2JyPjxhIGhyZWY9Imh0 dHA6Ly90b3JnLmFwYWNoZS50b21jYXQudXRpbC5uZXQiPnRvcmcuYXBhY2hlLnRvbWNhdC51dGls Lm5ldDwvYT4uPHdicj5KSW9FbmRwb2ludCRTb2NrZXRQcm9jZXNzb3IuPHdicj5ydW4oSklvRW5k cG9pbnQuamF2YToyODMpXG5cPHdicj50amF2YS51dGlsLmNvbmN1cnJlbnQuVGhyZWFkUG88d2Jy Pm9sRXhlY3V0b3IucnVuV29ya2VyKFRocmVhZFBvbzx3YnI+bEV4ZWN1dG9yLmphdmE6MTE0OSlc blx0amF2YS48d2JyPnV0aWwuY29uY3VycmVudC5UaHJlYWRQb29sRXhlYzx3YnI+dXRvciRXb3Jr ZXIucnVuKFRocmVhZFBvb2xFeGVjPHdicj51dG9yLmphdmE6NjI0KVxuXHRvcmcuYXBhY2hlLjx3 YnI+dG9tY2F0LnV0aWwudGhyZWFkcy48d2JyPlRhc2tUaHJlYWQkV3JhcHBpbmdSdW5uYWJsZS48 d2JyPnJ1bihUYXNrVGhyZWFkLmphdmE6NjEpXG5cPHdicj50amF2YS5sYW5nLlRocmVhZC5ydW4o VGhyZWFkLjx3YnI+amF2YTo3NDgpXG4mbHQ7L3ByZSZndDsmbHQ7cCZndDsmbHQ7YiZndDtub3Rl Jmx0Oy88d2JyPmImZ3Q7PGJyPgomZ3Q7wqAgwqAgwqAmbHQ7dSZndDtUaGUgZnVsbCBzdGFjayB0 cmFjZSBvZiB0aGUgcm9vdCBjYXVzZSBpcyBhdmFpbGFibGUgaW4gdGhlIEFwYWNoZTxicj4KJmd0 O8KgIMKgIMKgVG9tY2F0LzguMC40NiAoVWJ1bnR1KSBsb2dzLiZsdDsvdSZndDsmbHQ7L3AmZ3Q7 Jmx0O2hyIGNsYXNzPSZxdW90O2xpbmUmcXVvdDsmZ3Q7Jmx0O2gzJmd0O0FwYWNoZTxicj4KJmd0 O8KgIMKgIMKgVG9tY2F0LzguMC40NiAoVWJ1bnR1KSZsdDsvaDMmZ3Q7Jmx0Oy9ib2R5Jmd0OyZs dDsvaHRtbCZndDsmIzM5Ozxicj4KJmd0O8KgIMKgIMKgMjAxNy0xMS0xNVQxMzowNTo1OVogRVJS T1IgSVBBIHNlcnZlciB1cGdyYWRlIGZhaWxlZDogSW5zcGVjdDxicj4KJmd0O8KgIMKgIMKgL3Zh ci9sb2cvaXBhdXBncmFkZS5sb2cgYW5kIHJ1biBjb21tYW5kIGlwYS1zZXJ2ZXItdXBncmFkZSBt YW51YWxseS48YnI+CiZndDvCoCDCoCDCoDIwMTctMTEtMTVUMTM6MDU6NTlaIERFQlVHwqAgwqBG aWxlPGJyPgomZ3Q7wqAgwqAgwqAmcXVvdDsvdXNyL2xpYi9weXRob24yLjcvZGlzdC1wYWNrPHdi cj5hZ2VzL2lwYXB5dGhvbi9hZG1pbnRvb2wucHkmcXVvdDssIGxpbmUgMTcyLDxicj4KJmd0O8Kg IMKgIMKgaW4gZXhlY3V0ZTxicj4KJmd0O8KgIMKgIMKgIMKgIMKgcmV0dXJuX3ZhbHVlID0gc2Vs Zi5ydW4oKTxicj4KJmd0O8KgIMKgIMKgIMKgRmlsZTxicj4KJmd0O8KgIMKgIMKgJnF1b3Q7L3Vz ci9saWIvcHl0aG9uMi43L2Rpc3QtcGFjazx3YnI+YWdlcy9pcGFzZXJ2ZXIvaW5zdGFsbC9pcGFf PHdicj5zZXJ2ZXJfdXBncmFkZS5weSZxdW90Oyw8YnI+CiZndDvCoCDCoCDCoGxpbmUgNDYsIGlu IHJ1bjxicj4KJmd0O8KgIMKgIMKgIMKgIMKgc2VydmVyLnVwZ3JhZGUoKTxicj4KJmd0O8KgIMKg IMKgIMKgRmlsZTxicj4KJmd0O8KgIMKgIMKgJnF1b3Q7L3Vzci9saWIvcHl0aG9uMi43L2Rpc3Qt cGFjazx3YnI+YWdlcy9pcGFzZXJ2ZXIvaW5zdGFsbC9zZXJ2ZXIvPHdicj51cGdyYWRlLnB5JnF1 b3Q7LDxicj4KJmd0O8KgIMKgIMKgbGluZSAxODc4LCBpbiB1cGdyYWRlPGJyPgomZ3Q7wqAgwqAg wqAgwqAgwqB1cGdyYWRlX2NvbmZpZ3VyYXRpb24oKTxicj4KJmd0O8KgIMKgIMKgIMKgRmlsZTxi cj4KJmd0O8KgIMKgIMKgJnF1b3Q7L3Vzci9saWIvcHl0aG9uMi43L2Rpc3QtcGFjazx3YnI+YWdl cy9pcGFzZXJ2ZXIvaW5zdGFsbC9zZXJ2ZXIvPHdicj51cGdyYWRlLnB5JnF1b3Q7LDxicj4KJmd0 O8KgIMKgIMKgbGluZSAxNzk3LCBpbiB1cGdyYWRlX2NvbmZpZ3VyYXRpb248YnI+CiZndDvCoCDC oCDCoCDCoCDCoGNhX2VuYWJsZV9sZGFwX3Byb2ZpbGVfc3Vic3lzPHdicj50ZW0oY2EpPGJyPgom Z3Q7wqAgwqAgwqAgwqBGaWxlPGJyPgomZ3Q7wqAgwqAgwqAmcXVvdDsvdXNyL2xpYi9weXRob24y LjcvZGlzdC1wYWNrPHdicj5hZ2VzL2lwYXNlcnZlci9pbnN0YWxsL3NlcnZlci88d2JyPnVwZ3Jh ZGUucHkmcXVvdDssPGJyPgomZ3Q7wqAgwqAgwqBsaW5lIDM0NywgaW4gY2FfZW5hYmxlX2xkYXBf cHJvZmlsZV9zdWJzeXN0PHdicj5lbTxicj4KJmd0O8KgIMKgIMKgIMKgIMKgY2FpbnN0YW5jZS5t aWdyYXRlX3Byb2ZpbGVzX3Q8d2JyPm9fbGRhcCgpPGJyPgomZ3Q7wqAgwqAgwqAgwqBGaWxlPGJy PgomZ3Q7wqAgwqAgwqAmcXVvdDsvdXNyL2xpYi9weXRob24yLjcvZGlzdC1wYWNrPHdicj5hZ2Vz L2lwYXNlcnZlci9pbnN0YWxsL2NhaW5zdGE8d2JyPm5jZS5weSZxdW90Oyw8YnI+CiZndDvCoCDC oCDCoGxpbmUgMTk4MSwgaW4gbWlncmF0ZV9wcm9maWxlc190b19sZGFwPGJyPgomZ3Q7wqAgwqAg wqAgwqAgwqBfY3JlYXRlX2RvZ3RhZ19wcm9maWxlKHByb2ZpbDx3YnI+ZV9pZCwgcHJvZmlsZV9k YXRhLCBvdmVyd3JpdGU9RmFsc2UpPGJyPgomZ3Q7wqAgwqAgwqAgwqBGaWxlPGJyPgomZ3Q7wqAg wqAgwqAmcXVvdDsvdXNyL2xpYi9weXRob24yLjcvZGlzdC1wYWNrPHdicj5hZ2VzL2lwYXNlcnZl ci9pbnN0YWxsL2NhaW5zdGE8d2JyPm5jZS5weSZxdW90Oyw8YnI+CiZndDvCoCDCoCDCoGxpbmUg MTk4NywgaW4gX2NyZWF0ZV9kb2d0YWdfcHJvZmlsZTxicj4KJmd0O8KgIMKgIMKgIMKgIMKgd2l0 aCBhcGkuQmFja2VuZC5yYV9jZXJ0cHJvZmlsZSBhcyBwcm9maWxlX2FwaTo8YnI+CiZndDvCoCDC oCDCoCDCoEZpbGU8YnI+CiZndDvCoCDCoCDCoCZxdW90Oy91c3IvbGliL3B5dGhvbjIuNy9kaXN0 LXBhY2s8d2JyPmFnZXMvaXBhc2VydmVyL3BsdWdpbnMvZG9ndGFnLjx3YnI+cHkmcXVvdDssIGxp bmU8YnI+CiZndDvCoCDCoCDCoDEyOTQsIGluIF9fZW50ZXJfXzxicj4KJmd0O8KgIMKgIMKgIMKg IMKgcmFpc2UgZXJyb3JzLlJlbW90ZVJldHJpZXZlRXJyb3IocmVhPHdicj5zb249XygmIzM5O0Zh aWxlZCB0bzxicj4KJmd0O8KgIMKgIMKgYXV0aGVudGljYXRlIHRvIENBIFJFU1QgQVBJJiMzOTsp KTxicj4KJmd0Ozxicj4KJmd0O8KgIMKgIMKgMjAxNy0xMS0xNVQxMzowNTo1OVogREVCVUcgVGhl IGlwYS1zZXJ2ZXItdXBncmFkZSBjb21tYW5kIGZhaWxlZCw8YnI+CiZndDvCoCDCoCDCoGV4Y2Vw dGlvbjogUmVtb3RlUmV0cmlldmVFcnJvcjogRmFpbGVkIHRvIGF1dGhlbnRpY2F0ZSB0byBDQSBS RVNUIEFQSTxicj4KJmd0O8KgIMKgIMKgMjAxNy0xMS0xNVQxMzowNTo1OVogRVJST1IgVW5leHBl Y3RlZCBlcnJvciAtIHNlZTxicj4KJmd0O8KgIMKgIMKgL3Zhci9sb2cvaXBhdXBncmFkZS5sb2cg Zm9yIGRldGFpbHM6PGJyPgomZ3Q7wqAgwqAgwqBSZW1vdGVSZXRyaWV2ZUVycm9yOiBGYWlsZWQg dG8gYXV0aGVudGljYXRlIHRvIENBIFJFU1QgQVBJPGJyPgomZ3Q7PGJyPgomZ3Q7PGJyPgomZ3Q7 PGJyPgomZ3Q7PGJyPgo8L2Rpdj48ZGl2IGNsYXNzPSJtXzYzMzkyOTE5OTAyMjMzMjIyNGVsaWRl ZC10ZXh0Ij4mZ3Q7IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzx3YnI+X19fX19fX19f X19fX19fX188YnI+CiZndDsgRnJlZUlQQS11c2VycyBtYWlsaW5nIGxpc3QgLS0gPGEgaHJlZj0i bWFpbHRvOmZyZWVpcGEtdXNlcnNAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZyIgdGFyZ2V0PSJfYmxh bmsiPmZyZWVpcGEtdXNlcnNAbGlzdHMuZmVkb3JhaG9zdDx3YnI+ZWQub3JnPC9hPjxicj4KJmd0 OyBUbyB1bnN1YnNjcmliZSBzZW5kIGFuIGVtYWlsIHRvIDxhIGhyZWY9Im1haWx0bzpmcmVlaXBh LXVzZXJzLWxlYXZlQGxpc3RzLmZlZG9yYWhvc3RlZC5vcmciIHRhcmdldD0iX2JsYW5rIj5mcmVl aXBhLXVzZXJzLWxlYXZlQGxpc3RzLmZlZG88d2JyPnJhaG9zdGVkLm9yZzwvYT48YnI+CiZndDs8 YnI+Cjxicj4KPC9kaXY+PC9ibG9ja3F1b3RlPjwvZGl2Pjxicj48L2Rpdj48L2Rpdj48L2Rpdj48 L2Rpdj48L2Rpdj4KPC9ibG9ja3F1b3RlPjwvZGl2Pjxicj48L2Rpdj4K --===============6696494450510794275==-- From davidcharvey at googlemail.com Tue Nov 21 11:15:48 2017 Content-Type: multipart/mixed; boundary="===============2229318225281214543==" MIME-Version: 1.0 From: David Harvey To: freeipa-users at lists.fedorahosted.org Subject: [Freeipa-users] Re: upgrade to ubuntu 17.10 fails Date: Tue, 21 Nov 2017 11:15:12 +0000 Message-ID: In-Reply-To: CADq_JGq-_3s-jKqxFeh72sR-9i_3zLphiNfU3jJOkTdv_S5W2g@mail.gmail.com --===============2229318225281214543== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Hoi, Anyone out there with experience of whether or not adding a replica of more recent version (4.4.4 and 389 dir 1.3.7.5-1 up from 4.4.3 with 389 dir 1.3.5.15-2) would impact the existing servers in terms of schema or similar? I'm still trying to find a safe way to upgrade safely without going past a point of no return... Kind regards, David On 17 November 2017 at 15:10, David Harvey wrote: > Hi again, > > No joy yet with spotting CA anomalies. Any additional tips there Rob? > > Gentle bump Simon, are you confident that building a new replica won't > fall foul of the below from the upgrade page (the schema part): > > Words of caution > > - Note that the server is in a *maintenance mode* during upgrade and > does not respond to requests! > - Schema or Directory Server > database object > changes done during the upgrade are replicated to *all FreeIPA masters* > > > Thanks again for the support, > > David > > On 15 November 2017 at 16:52, David Harvey > wrote: > >> Thanks Rob, Simon, >> >> Rob, will check, but thought my cert system was healthy before. It's >> relatively new (6months or less), and no sub-ca's involved.. Any specifi= cs >> on how to invoke the selftests in some manner that might provide digesti= ble >> output? Or could it be my dirty hack of cloning and isolation and I shou= ld >> do as Simon suggested :)? >> >> Simon. WRT spinning up a replica. I was under the impression that all >> running servers had to be of the same version, am I mistaken with that? >> I had avoided what you were suggesting as I feared the new server might >> update the schema on the existing ones! >> >> Thanks again, appreciate the steering! >> >> >> On 15 Nov 2017 14:34, "Rob Crittenden" wrote: >> >> David Harvey via FreeIPA-users wrote: >> > Sorry for the dump size, but not sure if the below from >> > /var/log/pki/pki-tomcat/localhost.date.log helps: >> >> Looks like the selftests are failing. I'd check that your CA subsystem >> certificates are not expired, etc. >> >> rob >> >> > >> > 15-Nov-2017 12:14:50.557 SEVERE [localhost-startStop-1] >> > org.apache.catalina.core.ApplicationContext.log >> StandardWrapper.Throwable >> > java.lang.NullPointerException >> > at >> > com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown(Se >> lfTestSubsystem.java:1886) >> > at >> > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEn >> gine.java:2118) >> > at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) >> > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) >> > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) >> > at >> > com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartS >> ervlet.java:114) >> > at javax.servlet.GenericServlet.init(GenericServlet.java:158) >> > at >> > org.apache.catalina.core.StandardWrapper.initServlet(Standar >> dWrapper.java:1227) >> > at >> > org.apache.catalina.core.StandardWrapper.loadServlet(Standar >> dWrapper.java:1140) >> > at org.apache.catalina.core.StandardWrapper.load(StandardWrappe >> r.java:1027) >> > at >> > org.apache.catalina.core.StandardContext.loadOnStartup(Stand >> ardContext.java:5038) >> > at >> > org.apache.catalina.core.StandardContext.startInternal(Stand >> ardContext.java:5348) >> > at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) >> > at >> > org.apache.catalina.core.ContainerBase.addChildInternal(Cont >> ainerBase.java:753) >> > at org.apache.catalina.core.ContainerBase.addChild(ContainerBas >> e.java:729) >> > at org.apache.catalina.core.StandardHost.addChild(StandardHost. >> java:717) >> > at >> > org.apache.catalina.startup.HostConfig.deployDescriptor(Host >> Config.java:621) >> > at >> > org.apache.catalina.startup.HostConfig$DeployDescriptor.run( >> HostConfig.java:1835) >> > at java.util.concurrent.Executors$RunnableAdapter.call(Executor >> s.java:511) >> > at java.util.concurrent.FutureTask.run(FutureTask.java:266) >> > at >> > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool >> Executor.java:1149) >> > at >> > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo >> lExecutor.java:624) >> > at java.lang.Thread.run(Thread.java:748) >> > >> > 15-Nov-2017 12:14:50.558 SEVERE [localhost-startStop-1] >> > org.apache.catalina.core.StandardContext.loadOnStartup Servlet >> [castart] >> > in web application [/ca] threw load() exception >> > java.lang.NullPointerException >> > at >> > com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown(Se >> lfTestSubsystem.java:1886) >> > at >> > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEn >> gine.java:2118) >> > at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) >> > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) >> > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) >> > at >> > com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartS >> ervlet.java:114) >> > at javax.servlet.GenericServlet.init(GenericServlet.java:158) >> > at >> > org.apache.catalina.core.StandardWrapper.initServlet(Standar >> dWrapper.java:1227) >> > at >> > org.apache.catalina.core.StandardWrapper.loadServlet(Standar >> dWrapper.java:1140) >> > at org.apache.catalina.core.StandardWrapper.load(StandardWrappe >> r.java:1027) >> > at >> > org.apache.catalina.core.StandardContext.loadOnStartup(Stand >> ardContext.java:5038) >> > at >> > org.apache.catalina.core.StandardContext.startInternal(Stand >> ardContext.java:5348) >> > at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) >> > at >> > org.apache.catalina.core.ContainerBase.addChildInternal(Cont >> ainerBase.java:753) >> > at org.apache.catalina.core.ContainerBase.addChild(ContainerBas >> e.java:729) >> > at org.apache.catalina.core.StandardHost.addChild(StandardHost. >> java:717) >> > at >> > org.apache.catalina.startup.HostConfig.deployDescriptor(Host >> Config.java:621) >> > at >> > org.apache.catalina.startup.HostConfig$DeployDescriptor.run( >> HostConfig.java:1835) >> > at java.util.concurrent.Executors$RunnableAdapter.call(Executor >> s.java:511) >> > at java.util.concurrent.FutureTask.run(FutureTask.java:266) >> > at >> > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool >> Executor.java:1149) >> > at >> > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo >> lExecutor.java:624) >> > at java.lang.Thread.run(Thread.java:748) >> > >> > 15-Nov-2017 12:14:54.509 SEVERE [http-bio-8443-exec-1] >> > org.apache.catalina.core.StandardHostValve.invoke Exception Processing >> > /ca/rest/account/login >> > javax.ws.rs.ServiceUnavailableException: Subsystem unavailable >> > at >> > com.netscape.cms.tomcat.ProxyRealm.findSecurityConstraints(P >> roxyRealm.java:138) >> > at >> > org.apache.catalina.authenticator.AuthenticatorBase.invoke(A >> uthenticatorBase.java:498) >> > at >> > org.apache.catalina.core.StandardHostValve.invoke(StandardHo >> stValve.java:141) >> > at >> > org.apache.catalina.valves.ErrorReportValve.invoke(ErrorRepo >> rtValve.java:79) >> > at >> > org.apache.catalina.valves.AbstractAccessLogValve.invoke(Abs >> tractAccessLogValve.java:620) >> > at >> > org.apache.catalina.core.StandardEngineValve.invoke(Standard >> EngineValve.java:88) >> > at >> > org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAd >> apter.java:502) >> > at >> > org.apache.coyote.http11.AbstractHttp11Processor.process(Abs >> tractHttp11Processor.java:1132) >> > at >> > org.apache.coyote.AbstractProtocol$AbstractConnectionHandler >> .process(AbstractProtocol.java:684) >> > at >> > org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(J >> IoEndpoint.java:283) >> > at >> > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool >> Executor.java:1149) >> > at >> > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo >> lExecutor.java:624) >> > at >> > org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.r >> un(TaskThread.java:61) >> > at java.lang.Thread.run(Thread.java:748) >> > >> > 15-Nov-2017 13:05:55.874 SEVERE [localhost-startStop-1] >> > org.apache.catalina.core.ApplicationContext.log >> StandardWrapper.Throwable >> > java.lang.NullPointerException >> > at >> > com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown(Se >> lfTestSubsystem.java:1886) >> > at >> > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEn >> gine.java:2118) >> > at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) >> > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) >> > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) >> > at >> > com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartS >> ervlet.java:114) >> > at javax.servlet.GenericServlet.init(GenericServlet.java:158) >> > at >> > org.apache.catalina.core.StandardWrapper.initServlet(Standar >> dWrapper.java:1227) >> > at >> > org.apache.catalina.core.StandardWrapper.loadServlet(Standar >> dWrapper.java:1140) >> > at org.apache.catalina.core.StandardWrapper.load(StandardWrappe >> r.java:1027) >> > at >> > org.apache.catalina.core.StandardContext.loadOnStartup(Stand >> ardContext.java:5038) >> > at >> > org.apache.catalina.core.StandardContext.startInternal(Stand >> ardContext.java:5348) >> > at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) >> > at >> > org.apache.catalina.core.ContainerBase.addChildInternal(Cont >> ainerBase.java:753) >> > at org.apache.catalina.core.ContainerBase.addChild(ContainerBas >> e.java:729) >> > at org.apache.catalina.core.StandardHost.addChild(StandardHost. >> java:717) >> > at >> > org.apache.catalina.startup.HostConfig.deployDescriptor(Host >> Config.java:621) >> > at >> > org.apache.catalina.startup.HostConfig$DeployDescriptor.run( >> HostConfig.java:1835) >> > at java.util.concurrent.Executors$RunnableAdapter.call(Executor >> s.java:511) >> > at java.util.concurrent.FutureTask.run(FutureTask.java:266) >> > at >> > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool >> Executor.java:1149) >> > at >> > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo >> lExecutor.java:624) >> > at java.lang.Thread.run(Thread.java:748) >> > >> > 15-Nov-2017 13:05:55.875 SEVERE [localhost-startStop-1] >> > org.apache.catalina.core.StandardContext.loadOnStartup Servlet >> [castart] >> > in web application [/ca] threw load() exception >> > java.lang.NullPointerException >> > at >> > com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown(Se >> lfTestSubsystem.java:1886) >> > at >> > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEn >> gine.java:2118) >> > at com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2013) >> > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) >> > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) >> > at >> > com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartS >> ervlet.java:114) >> > at javax.servlet.GenericServlet.init(GenericServlet.java:158) >> > at >> > org.apache.catalina.core.StandardWrapper.initServlet(Standar >> dWrapper.java:1227) >> > at >> > org.apache.catalina.core.StandardWrapper.loadServlet(Standar >> dWrapper.java:1140) >> > at org.apache.catalina.core.StandardWrapper.load(StandardWrappe >> r.java:1027) >> > at >> > org.apache.catalina.core.StandardContext.loadOnStartup(Stand >> ardContext.java:5038) >> > at >> > org.apache.catalina.core.StandardContext.startInternal(Stand >> ardContext.java:5348) >> > at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) >> > at >> > org.apache.catalina.core.ContainerBase.addChildInternal(Cont >> ainerBase.java:753) >> > at org.apache.catalina.core.ContainerBase.addChild(ContainerBas >> e.java:729) >> > at org.apache.catalina.core.StandardHost.addChild(StandardHost. >> java:717) >> > at >> > org.apache.catalina.startup.HostConfig.deployDescriptor(Host >> Config.java:621) >> > at >> > org.apache.catalina.startup.HostConfig$DeployDescriptor.run( >> HostConfig.java:1835) >> > at java.util.concurrent.Executors$RunnableAdapter.call(Executor >> s.java:511) >> > at java.util.concurrent.FutureTask.run(FutureTask.java:266) >> > at >> > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool >> Executor.java:1149) >> > at >> > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo >> lExecutor.java:624) >> > at java.lang.Thread.run(Thread.java:748) >> > >> > 15-Nov-2017 13:05:59.706 SEVERE [http-bio-8443-exec-1] >> > org.apache.catalina.core.StandardHostValve.invoke Exception Processing >> > /ca/rest/account/login >> > javax.ws.rs.ServiceUnavailableException: Subsystem unavailable >> > at >> > com.netscape.cms.tomcat.ProxyRealm.findSecurityConstraints(P >> roxyRealm.java:138) >> > at >> > org.apache.catalina.authenticator.AuthenticatorBase.invoke(A >> uthenticatorBase.java:498) >> > at >> > org.apache.catalina.core.StandardHostValve.invoke(StandardHo >> stValve.java:141) >> > at >> > org.apache.catalina.valves.ErrorReportValve.invoke(ErrorRepo >> rtValve.java:79) >> > at >> > org.apache.catalina.valves.AbstractAccessLogValve.invoke(Abs >> tractAccessLogValve.java:620) >> > at >> > org.apache.catalina.core.StandardEngineValve.invoke(Standard >> EngineValve.java:88) >> > at >> > org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAd >> apter.java:502) >> > at >> > org.apache.coyote.http11.AbstractHttp11Processor.process(Abs >> tractHttp11Processor.java:1132) >> > at >> > org.apache.coyote.AbstractProtocol$AbstractConnectionHandler >> .process(AbstractProtocol.java:684) >> > at >> > org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(J >> IoEndpoint.java:283) >> > at >> > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPool >> Executor.java:1149) >> > at >> > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoo >> lExecutor.java:624) >> > at >> > org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.r >> un(TaskThread.java:61) >> > at java.lang.Thread.run(Thread.java:748) >> > >> > >> > On 15 November 2017 at 13:23, David Harvey > > > wrote: >> > >> > Hi wisdom of the list, >> > >> > I know I am an edge case with running on ubuntu, but hoped someone >> > might be able to shed some light. >> > >> > A bit of background. I'm trying to test upgrades without >> > potentially hosing my existing services, so I have cloned the VM, >> > given it a new IP address, updated hosts file and pointed DNS >> > somewhere that doesn't know about the real IPA services (8.8.8.8) = so >> > it won't try and sync or replicate. >> > >> > Attempting to upgrade hits a snags or two, some described in bugs >> > already like the pki version number confusing the apt >> > scripts https://bugs.launchpad.net/ubu >> ntu/+source/freeipa/+bug/1703051 >> > ). >> > The one I can't work around however is below. >> > >> > It seems deeply unhappy, and restarting the services result in the >> > dogtag-pki web page being available until a login attempt is made >> > (as occurs during the ipa-server-upgrade) after which point it bom= bs >> > with a 500 error. >> > >> > Could the below caused >> > by https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1716842 >> > ? >> > >> > Any advice appreciated, as I think even when 18.04 hits with the >> > proposed updates to rely on to tomcat 8.5, I'll still need to >> > upgrade via 17.10 which seems currently fraught! If it relates to >> > my method of cloning the VM, is there a better way of testing >> > upgrades without potentially hosing the existing live systems? >> > >> > >> > Thanks in advance, >> > >> > David >> > >> > 2017-11-15T13:05:59Z DEBUG approved_usage =3D SSL Server >> > intended_usage =3D SSL Server >> > 2017-11-15T13:05:59Z DEBUG cert valid True for "CN=3Dipa1.my.net >> > ,O=3DTHOMAC.NET " >> > 2017-11-15T13:05:59Z DEBUG handshake complete, peer =3D IPADDRESS >> > 2017-11-15T13:05:59Z DEBUG Protocol: TLS1.2 >> > 2017-11-15T13:05:59Z DEBUG Cipher: TLS_RSA_WITH_AES_128_CBC_SHA >> > 2017-11-15T13:05:59Z DEBUG response status 500 >> > 2017-11-15T13:05:59Z DEBUG response headers {'content-length': >> > '2292', 'content-language': 'en', 'server': 'Apache-Coyote/1.1', >> > 'connection': 'close', 'date': 'Wed, 15 Nov 2017 13:05:59 GMT', >> > 'content-type': 'text/html;charset=3Dutf-8'} >> > 2017-11-15T13:05:59Z DEBUG response body '> > html>Apache Tomcat/8.0.46 (Ubuntu) - Error >> > report >> >

HTTP Status 500 - Subsystem unavailable

> > class=3D"line">

type Exception >> > report

message Subsystem >> > unavailable

description The server encountered >> > an internal error that prevented it from fulfilling this >> > request.

exception

javax.ws.rs
>> >     .ServiceUnavailableException: Subsystem
>> >     unavailable\n\tcom.netscape.cms.tomcat.ProxyRealm.findSecur
>> ityConstraints(ProxyRealm.java:138)\n\torg.apache.catalina.
>> authenticator.AuthenticatorBase.invoke(AuthenticatorBase.
>> java:498)\n\torg.apache.catalina.valves.ErrorReportValve.
>> invoke(ErrorReportValve.java:79)\n\torg.apache.catalina.
>> valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.
>> java:620)\n\torg.apache.catalina.connector.CoyoteAdapt
>> er.service(CoyoteAdapter.java:502)\n\torg.apache.coyote.
>> http11.AbstractHttp11Processor.process(AbstractHttp11Process
>> or.java:1132)\n\torg.apache.coyote.AbstractProtocol$
>> AbstractConnectionHandler.process(AbstractProtocol.java:684)\n\
>> torg.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(
>> JIoEndpoint.java:283)\n\tjava.util.concurrent.ThreadPoolExec
>> utor.runWorker(ThreadPoolExecutor.java:1149)\n\tjava.util.
>> concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.
>> java:624)\n\torg.apache.tomcat.util.threads.TaskThread$
>> WrappingRunnable.run(TaskThread.java:61)\n\tjava.
>> lang.Thread.run(Thread.java:748)\n

note >> > The full stack trace of the root cause is available in the Apac= he >> > Tomcat/8.0.46 (Ubuntu) logs.

Apache >> > Tomcat/8.0.46 (Ubuntu)

' >> > 2017-11-15T13:05:59Z ERROR IPA server upgrade failed: Inspect >> > /var/log/ipaupgrade.log and run command ipa-server-upgrade manuall= y. >> > 2017-11-15T13:05:59Z DEBUG File >> > "/usr/lib/python2.7/dist-packages/ipapython/admintool.py", line >> 172, >> > in execute >> > return_value =3D self.run() >> > File >> > "/usr/lib/python2.7/dist-packages/ipaserver/install/ipa_ser >> ver_upgrade.py", >> > line 46, in run >> > server.upgrade() >> > File >> > "/usr/lib/python2.7/dist-packages/ipaserver/install/server/ >> upgrade.py", >> > line 1878, in upgrade >> > upgrade_configuration() >> > File >> > "/usr/lib/python2.7/dist-packages/ipaserver/install/server/ >> upgrade.py", >> > line 1797, in upgrade_configuration >> > ca_enable_ldap_profile_subsystem(ca) >> > File >> > "/usr/lib/python2.7/dist-packages/ipaserver/install/server/ >> upgrade.py", >> > line 347, in ca_enable_ldap_profile_subsystem >> > cainstance.migrate_profiles_to_ldap() >> > File >> > "/usr/lib/python2.7/dist-packages/ipaserver/install/cainstance.py", >> > line 1981, in migrate_profiles_to_ldap >> > _create_dogtag_profile(profile_id, profile_data, >> overwrite=3DFalse) >> > File >> > "/usr/lib/python2.7/dist-packages/ipaserver/install/cainstance.py", >> > line 1987, in _create_dogtag_profile >> > with api.Backend.ra_certprofile as profile_api: >> > File >> > "/usr/lib/python2.7/dist-packages/ipaserver/plugins/dogtag.py", >> line >> > 1294, in __enter__ >> > raise errors.RemoteRetrieveError(reason=3D_('Failed to >> > authenticate to CA REST API')) >> > >> > 2017-11-15T13:05:59Z DEBUG The ipa-server-upgrade command failed, >> > exception: RemoteRetrieveError: Failed to authenticate to CA REST >> API >> > 2017-11-15T13:05:59Z ERROR Unexpected error - see >> > /var/log/ipaupgrade.log for details: >> > RemoteRetrieveError: Failed to authenticate to CA REST API >> > >> > >> > >> > >> > _______________________________________________ >> > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org >> > To unsubscribe send an email to freeipa-users-leave(a)lists.fedo >> rahosted.org >> > >> >> >> > --===============2229318225281214543== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGRpdiBkaXI9Imx0ciI+SG9pLDxkaXY+PGJyPjwvZGl2PjxkaXY+QW55b25lIG91dCB0aGVyZSB3 aXRoIGV4cGVyaWVuY2Ugb2Ygd2hldGhlciBvciBub3QgYWRkaW5nIGEgcmVwbGljYSBvZiBtb3Jl IHJlY2VudCB2ZXJzaW9uICg0LjQuNCBhbmQgMzg5IGRpcsKgMS4zLjcuNS0xIHVwIGZyb20gNC40 LjMgd2l0aCAzODkgZGlywqAxLjMuNS4xNS0yKcKgIHdvdWxkIGltcGFjdCB0aGUgZXhpc3Rpbmcg c2VydmVycyBpbiB0ZXJtcyBvZiBzY2hlbWEgb3Igc2ltaWxhcj88L2Rpdj48ZGl2PkkmIzM5O20g c3RpbGwgdHJ5aW5nIHRvIGZpbmQgYSBzYWZlIHdheSB0byB1cGdyYWRlIHNhZmVseSB3aXRob3V0 IGdvaW5nIHBhc3QgYSBwb2ludCBvZiBubyByZXR1cm4uLi48L2Rpdj48ZGl2Pjxicj48L2Rpdj48 ZGl2PktpbmQgcmVnYXJkcyw8L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PkRhdmlkPC9kaXY+PC9k aXY+PGRpdiBjbGFzcz0iZ21haWxfZXh0cmEiPjxicj48ZGl2IGNsYXNzPSJnbWFpbF9xdW90ZSI+ T24gMTcgTm92ZW1iZXIgMjAxNyBhdCAxNToxMCwgRGF2aWQgSGFydmV5IDxzcGFuIGRpcj0ibHRy Ij4mbHQ7PGEgaHJlZj0ibWFpbHRvOmRhdmlkY2hhcnZleUBnb29nbGVtYWlsLmNvbSIgdGFyZ2V0 PSJfYmxhbmsiPmRhdmlkY2hhcnZleUBnb29nbGVtYWlsLmNvbTwvYT4mZ3Q7PC9zcGFuPiB3cm90 ZTo8YnI+PGJsb2NrcXVvdGUgY2xhc3M9ImdtYWlsX3F1b3RlIiBzdHlsZT0ibWFyZ2luOjAgMCAw IC44ZXg7Ym9yZGVyLWxlZnQ6MXB4ICNjY2Mgc29saWQ7cGFkZGluZy1sZWZ0OjFleCI+PGRpdiBk aXI9Imx0ciI+PGRpdj5IaSBhZ2Fpbiw8L2Rpdj48ZGl2Pjxicj48L2Rpdj5ObyBqb3kgeWV0IHdp dGggc3BvdHRpbmcgQ0EgYW5vbWFsaWVzLiBBbnkgYWRkaXRpb25hbCB0aXBzIHRoZXJlIFJvYj88 YnI+PGJyPkdlbnRsZSBidW1wIFNpbW9uLCBhcmUgeW91IGNvbmZpZGVudCB0aGF0IGJ1aWxkaW5n IGEgbmV3IHJlcGxpY2Egd29uJiMzOTt0IGZhbGwgZm91bCBvZiB0aGUgYmVsb3cgZnJvbSB0aGUg dXBncmFkZSBwYWdlICh0aGUgc2NoZW1hIHBhcnQpOjxkaXY+PGRpdj48YnI+PC9kaXY+PGRpdj5X b3JkcyBvZiBjYXV0aW9uPHVsIHN0eWxlPSJwYWRkaW5nOjBweDttYXJnaW46MC4zZW0gMHB4IDBw eCAxLjZlbTtjb2xvcjpyZ2IoNDYsNTIsNTQpO2ZvbnQtZmFtaWx5OiZxdW90O1NvdXJjZSBTYW5z IFBybyZxdW90OyxzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxNHB4Ij48bGkgc3R5bGU9ImxpbmUtaGVp Z2h0OjIwcHgiPk5vdGUgdGhhdCB0aGUgc2VydmVyIGlzIGluIGHCoDxiPm1haW50ZW5hbmNlIG1v ZGU8L2I+wqBkdXJpbmcgdXBncmFkZSBhbmQgZG9lcyBub3QgcmVzcG9uZCB0byByZXF1ZXN0cyE8 L2xpPjxsaSBzdHlsZT0ibGluZS1oZWlnaHQ6MjBweCI+U2NoZW1hIG9ywqA8YSBocmVmPSJodHRw czovL3d3dy5mcmVlaXBhLm9yZy9wYWdlL0RpcmVjdG9yeV9TZXJ2ZXIiIHRpdGxlPSJEaXJlY3Rv cnkgU2VydmVyIiBzdHlsZT0iY29sb3I6cmdiKDc4LDE1NCw2KTt0ZXh0LWRlY29yYXRpb24tbGlu ZTpub25lO2ZvbnQtd2VpZ2h0OjYwMCIgdGFyZ2V0PSJfYmxhbmsiPkRpcmVjdG9yeSBTZXJ2ZXI8 L2E+wqBkYXRhYmFzZSBvYmplY3QgY2hhbmdlcyBkb25lIGR1cmluZyB0aGUgdXBncmFkZSBhcmUg cmVwbGljYXRlZCB0b8KgPGI+YWxsIEZyZWVJUEEgbWFzdGVyczwvYj48L2xpPjwvdWw+PGRpdj48 Zm9udCBjb2xvcj0iIzJlMzQzNiIgZmFjZT0iU291cmNlIFNhbnMgUHJvLCBzYW5zLXNlcmlmIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjE0cHgiPjxiPjxicj48L2I+PC9zcGFuPjwvZm9udD48L2Rp dj48L2Rpdj48L2Rpdj5UaGFua3MgYWdhaW4gZm9yIHRoZSBzdXBwb3J0LDxkaXY+PGJyPjwvZGl2 PjxkaXY+RGF2aWQ8L2Rpdj48L2Rpdj48ZGl2IGNsYXNzPSJIT0VuWmIiPjxkaXYgY2xhc3M9Img1 Ij48ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+PGJyPjxkaXYgY2xhc3M9ImdtYWlsX3F1b3RlIj5P biAxNSBOb3ZlbWJlciAyMDE3IGF0IDE2OjUyLCBEYXZpZCBIYXJ2ZXkgPHNwYW4gZGlyPSJsdHIi PiZsdDs8YSBocmVmPSJtYWlsdG86ZGF2aWRjaGFydmV5QGdvb2dsZW1haWwuY29tIiB0YXJnZXQ9 Il9ibGFuayI+ZGF2aWRjaGFydmV5QGdvb2dsZW1haWwuY29tPC9hPiZndDs8L3NwYW4+IHdyb3Rl Ojxicj48YmxvY2txdW90ZSBjbGFzcz0iZ21haWxfcXVvdGUiIHN0eWxlPSJtYXJnaW46MCAwIDAg LjhleDtib3JkZXItbGVmdDoxcHggI2NjYyBzb2xpZDtwYWRkaW5nLWxlZnQ6MWV4Ij48ZGl2IGRp cj0iYXV0byI+PGRpdj5UaGFua3MgUm9iLCBTaW1vbiw8ZGl2IGRpcj0iYXV0byI+PGJyPjwvZGl2 PjxkaXYgZGlyPSJhdXRvIj5Sb2IsIHdpbGwgY2hlY2ssIGJ1dCB0aG91Z2h0IG15IGNlcnQgc3lz dGVtIHdhcyBoZWFsdGh5IGJlZm9yZS4gSXQmIzM5O3MgcmVsYXRpdmVseSBuZXcgKDZtb250aHMg b3IgbGVzcyksIGFuZCBubyBzdWItY2EmIzM5O3MgaW52b2x2ZWQuLiBBbnkgc3BlY2lmaWNzIG9u IGhvdyB0byBpbnZva2UgdGhlIHNlbGZ0ZXN0cyBpbiBzb21lIG1hbm5lciB0aGF0IG1pZ2h0IHBy b3ZpZGUgZGlnZXN0aWJsZSBvdXRwdXQ/IE9yIGNvdWxkIGl0IGJlIG15IGRpcnR5IGhhY2sgb2Yg Y2xvbmluZyBhbmQgaXNvbGF0aW9uIGFuZCBJIHNob3VsZCBkbyBhcyBTaW1vbiBzdWdnZXN0ZWQg Oik/PC9kaXY+PGRpdiBkaXI9ImF1dG8iPjxicj48L2Rpdj48ZGl2IGRpcj0iYXV0byI+U2ltb24u IFdSVCBzcGlubmluZyB1cCBhIHJlcGxpY2EuIEkgd2FzIHVuZGVyIHRoZSBpbXByZXNzaW9uIHRo YXQgYWxsIHJ1bm5pbmcgc2VydmVycyBoYWQgdG8gYmUgb2YgdGhlIHNhbWUgdmVyc2lvbiwgYW0g SSBtaXN0YWtlbiB3aXRoIHRoYXQ/wqA8L2Rpdj48ZGl2IGRpcj0iYXV0byI+SSBoYWQgYXZvaWRl ZCB3aGF0IHlvdSB3ZXJlIHN1Z2dlc3RpbmcgYXMgSSBmZWFyZWQgdGhlIG5ldyBzZXJ2ZXIgbWln aHQgdXBkYXRlIHRoZSBzY2hlbWEgb24gdGhlIGV4aXN0aW5nIG9uZXMhPC9kaXY+PGRpdiBkaXI9 ImF1dG8iPjxicj48L2Rpdj5UaGFua3MgYWdhaW4sIGFwcHJlY2lhdGUgdGhlIHN0ZWVyaW5nITxk aXY+PGRpdiBjbGFzcz0ibV8yNDI5ODkxMDI1NDk1NDUzMDM5aDUiPjxicj48ZGl2IGNsYXNzPSJn bWFpbF9leHRyYSI+PGJyPjxkaXYgY2xhc3M9ImdtYWlsX3F1b3RlIj5PbiAxNSBOb3YgMjAxNyAx NDozNCwgJnF1b3Q7Um9iIENyaXR0ZW5kZW4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpyY3Jp dHRlbkByZWRoYXQuY29tIiB0YXJnZXQ9Il9ibGFuayI+cmNyaXR0ZW5AcmVkaGF0LmNvbTwvYT4m Z3Q7IHdyb3RlOjxiciB0eXBlPSJhdHRyaWJ1dGlvbiI+PGJsb2NrcXVvdGUgY2xhc3M9Im1fMjQy OTg5MTAyNTQ5NTQ1MzAzOW1fNjMzOTI5MTk5MDIyMzMyMjI0cXVvdGUiIHN0eWxlPSJtYXJnaW46 MCAwIDAgLjhleDtib3JkZXItbGVmdDoxcHggI2NjYyBzb2xpZDtwYWRkaW5nLWxlZnQ6MWV4Ij48 ZGl2IGNsYXNzPSJtXzI0Mjk4OTEwMjU0OTU0NTMwMzltXzYzMzkyOTE5OTAyMjMzMjIyNHF1b3Rl ZC10ZXh0Ij5EYXZpZCBIYXJ2ZXkgdmlhIEZyZWVJUEEtdXNlcnMgd3JvdGU6PGJyPgomZ3Q7IFNv cnJ5IGZvciB0aGUgZHVtcCBzaXplLCBidXQgbm90IHN1cmUgaWYgdGhlIGJlbG93IGZyb208YnI+ CiZndDsgL3Zhci9sb2cvcGtpL3BraS10b21jYXQvbG9jYWxoPHdicj5vc3QuZGF0ZS5sb2cgaGVs cHM6PGJyPgo8YnI+CjwvZGl2Pkxvb2tzIGxpa2UgdGhlIHNlbGZ0ZXN0cyBhcmUgZmFpbGluZy4g SSYjMzk7ZCBjaGVjayB0aGF0IHlvdXIgQ0Egc3Vic3lzdGVtPGJyPgpjZXJ0aWZpY2F0ZXMgYXJl IG5vdCBleHBpcmVkLCBldGMuPGJyPgo8YnI+CnJvYjxicj4KPGRpdiBjbGFzcz0ibV8yNDI5ODkx MDI1NDk1NDUzMDM5bV82MzM5MjkxOTkwMjIzMzIyMjRlbGlkZWQtdGV4dCI+PGJyPgomZ3Q7PGJy PgomZ3Q7IDE1LU5vdi0yMDE3IDEyOjE0OjUwLjU1NyBTRVZFUkUgW2xvY2FsaG9zdC1zdGFydFN0 b3AtMV08YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLkFwcGxpPHdicj5jYXRpb25D b250ZXh0LmxvZyBTdGFuZGFyZFdyYXBwZXIuVGhyb3dhYmxlPGJyPgomZ3Q7wqAgamF2YS5sYW5n Lk51bGxQb2ludGVyRXhjZXB0aW9uPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGNvbS5uZXRzY2FwZS5j bXNjb3JlLnNlbGZ0ZXN0czx3YnI+LlNlbGZUZXN0U3Vic3lzdGVtLnNodXRkb3duKFNlPHdicj5s ZlRlc3RTdWJzeXN0ZW0uamF2YToxODg2KTxicj4KJmd0OyBhdDxicj4KJmd0OyBjb20ubmV0c2Nh cGUuY21zY29yZS5hcHBzLkNNU0U8d2JyPm5naW5lLnNodXRkb3duU3Vic3lzdGVtcyhDTVNFbjx3 YnI+Z2luZS5qYXZhOjIxMTgpPGJyPgomZ3Q7IGF0IGNvbS5uZXRzY2FwZS5jbXNjb3JlLmFwcHMu Q01TRTx3YnI+bmdpbmUuc2h1dGRvd24oQ01TRW5naW5lLmphdmE6PHdicj4yMDEzKTxicj4KJmd0 OyBhdCBjb20ubmV0c2NhcGUuY2VydHNydi5hcHBzLkNNUy48d2JyPnNodXRkb3duKENNUy5qYXZh OjIzNCk8YnI+CiZndDsgYXQgY29tLm5ldHNjYXBlLmNlcnRzcnYuYXBwcy5DTVMuPHdicj5zdGFy dChDTVMuamF2YToxNjMwKTxicj4KJmd0OyBhdDxicj4KJmd0OyBjb20ubmV0c2NhcGUuY21zLnNl cnZsZXQuYmFzZS48d2JyPkNNU1N0YXJ0U2VydmxldC5pbml0KENNU1N0YXJ0Uzx3YnI+ZXJ2bGV0 LmphdmE6MTE0KTxicj4KJmd0OyBhdCBqYXZheC5zZXJ2bGV0LkdlbmVyaWNTZXJ2bGV0Lmk8d2Jy Pm5pdChHZW5lcmljU2VydmxldC5qYXZhOjE1OCk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFw YWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kPHdicj5hcmRXcmFwcGVyLmluaXRTZXJ2bGV0KFN0YW5k YXI8d2JyPmRXcmFwcGVyLmphdmE6MTIyNyk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNo ZS5jYXRhbGluYS5jb3JlLlN0YW5kPHdicj5hcmRXcmFwcGVyLmxvYWRTZXJ2bGV0KFN0YW5kYXI8 d2JyPmRXcmFwcGVyLmphdmE6MTE0MCk8YnI+CiZndDsgYXQgb3JnLmFwYWNoZS5jYXRhbGluYS5j b3JlLlN0YW5kPHdicj5hcmRXcmFwcGVyLmxvYWQoU3RhbmRhcmRXcmFwcGU8d2JyPnIuamF2YTox MDI3KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuU3RhbmQ8 d2JyPmFyZENvbnRleHQubG9hZE9uU3RhcnR1cChTdGFuZDx3YnI+YXJkQ29udGV4dC5qYXZhOjUw MzgpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZDx3 YnI+YXJkQ29udGV4dC5zdGFydEludGVybmFsKFN0YW5kPHdicj5hcmRDb250ZXh0LmphdmE6NTM0 OCk8YnI+CiZndDsgYXQgb3JnLmFwYWNoZS5jYXRhbGluYS51dGlsLkxpZmVjPHdicj55Y2xlQmFz ZS5zdGFydChMaWZlY3ljbGVCYXNlLmo8d2JyPmF2YToxNDUpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7 IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5Db250YTx3YnI+aW5lckJhc2UuYWRkQ2hpbGRJbnRl cm5hbChDb250PHdicj5haW5lckJhc2UuamF2YTo3NTMpPGJyPgomZ3Q7IGF0IG9yZy5hcGFjaGUu Y2F0YWxpbmEuY29yZS5Db250YTx3YnI+aW5lckJhc2UuYWRkQ2hpbGQoQ29udGFpbmVyQmFzPHdi cj5lLmphdmE6NzI5KTxicj4KJmd0OyBhdCBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuU3RhbmQ8 d2JyPmFyZEhvc3QuYWRkQ2hpbGQoU3RhbmRhcmRIb3N0Ljx3YnI+amF2YTo3MTcpPGJyPgomZ3Q7 IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuc3RhcnR1cC5Ibzx3YnI+c3RDb25maWcu ZGVwbG95RGVzY3JpcHRvcihIb3N0PHdicj5Db25maWcuamF2YTo2MjEpPGJyPgomZ3Q7IGF0PGJy PgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuc3RhcnR1cC5Ibzx3YnI+c3RDb25maWckRGVwbG95 RGVzY3JpcHRvci5ydW4oPHdicj5Ib3N0Q29uZmlnLmphdmE6MTgzNSk8YnI+CiZndDsgYXQgamF2 YS51dGlsLmNvbmN1cnJlbnQuRXhlY3V0b3JzPHdicj4kUnVubmFibGVBZGFwdGVyLmNhbGwoRXhl Y3V0b3I8d2JyPnMuamF2YTo1MTEpPGJyPgomZ3Q7IGF0IGphdmEudXRpbC5jb25jdXJyZW50LkZ1 dHVyZVRhczx3YnI+ay5ydW4oRnV0dXJlVGFzay5qYXZhOjI2Nik8YnI+CiZndDsgYXQ8YnI+CiZn dDsgamF2YS51dGlsLmNvbmN1cnJlbnQuVGhyZWFkUG9vPHdicj5sRXhlY3V0b3IucnVuV29ya2Vy KFRocmVhZFBvb2w8d2JyPkV4ZWN1dG9yLmphdmE6MTE0OSk8YnI+CiZndDsgYXQ8YnI+CiZndDsg amF2YS51dGlsLmNvbmN1cnJlbnQuVGhyZWFkUG9vPHdicj5sRXhlY3V0b3IkV29ya2VyLnJ1bihU aHJlYWRQb288d2JyPmxFeGVjdXRvci5qYXZhOjYyNCk8YnI+CiZndDsgYXQgamF2YS5sYW5nLlRo cmVhZC5ydW4oVGhyZWFkLmphPHdicj52YTo3NDgpPGJyPgomZ3Q7PGJyPgomZ3Q7IDE1LU5vdi0y MDE3IDEyOjE0OjUwLjU1OCBTRVZFUkUgW2xvY2FsaG9zdC1zdGFydFN0b3AtMV08YnI+CiZndDsg b3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kPHdicj5hcmRDb250ZXh0LmxvYWRPblN0YXJ0 dXAgU2VydmxldCBbY2FzdGFydF08YnI+CiZndDsgaW4gd2ViIGFwcGxpY2F0aW9uIFsvY2FdIHRo cmV3IGxvYWQoKSBleGNlcHRpb248YnI+CiZndDvCoCBqYXZhLmxhbmcuTnVsbFBvaW50ZXJFeGNl cHRpb248YnI+CiZndDsgYXQ8YnI+CiZndDsgY29tLm5ldHNjYXBlLmNtc2NvcmUuc2VsZnRlc3Rz PHdicj4uU2VsZlRlc3RTdWJzeXN0ZW0uc2h1dGRvd24oU2U8d2JyPmxmVGVzdFN1YnN5c3RlbS5q YXZhOjE4ODYpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGNvbS5uZXRzY2FwZS5jbXNjb3JlLmFwcHMu Q01TRTx3YnI+bmdpbmUuc2h1dGRvd25TdWJzeXN0ZW1zKENNU0VuPHdicj5naW5lLmphdmE6MjEx OCk8YnI+CiZndDsgYXQgY29tLm5ldHNjYXBlLmNtc2NvcmUuYXBwcy5DTVNFPHdicj5uZ2luZS5z aHV0ZG93bihDTVNFbmdpbmUuamF2YTo8d2JyPjIwMTMpPGJyPgomZ3Q7IGF0IGNvbS5uZXRzY2Fw ZS5jZXJ0c3J2LmFwcHMuQ01TLjx3YnI+c2h1dGRvd24oQ01TLmphdmE6MjM0KTxicj4KJmd0OyBh dCBjb20ubmV0c2NhcGUuY2VydHNydi5hcHBzLkNNUy48d2JyPnN0YXJ0KENNUy5qYXZhOjE2MzAp PGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGNvbS5uZXRzY2FwZS5jbXMuc2VydmxldC5iYXNlLjx3YnI+ Q01TU3RhcnRTZXJ2bGV0LmluaXQoQ01TU3RhcnRTPHdicj5lcnZsZXQuamF2YToxMTQpPGJyPgom Z3Q7IGF0IGphdmF4LnNlcnZsZXQuR2VuZXJpY1NlcnZsZXQuaTx3YnI+bml0KEdlbmVyaWNTZXJ2 bGV0LmphdmE6MTU4KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNv cmUuU3RhbmQ8d2JyPmFyZFdyYXBwZXIuaW5pdFNlcnZsZXQoU3RhbmRhcjx3YnI+ZFdyYXBwZXIu amF2YToxMjI3KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUu U3RhbmQ8d2JyPmFyZFdyYXBwZXIubG9hZFNlcnZsZXQoU3RhbmRhcjx3YnI+ZFdyYXBwZXIuamF2 YToxMTQwKTxicj4KJmd0OyBhdCBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuU3RhbmQ8d2JyPmFy ZFdyYXBwZXIubG9hZChTdGFuZGFyZFdyYXBwZTx3YnI+ci5qYXZhOjEwMjcpPGJyPgomZ3Q7IGF0 PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZDx3YnI+YXJkQ29udGV4dC5s b2FkT25TdGFydHVwKFN0YW5kPHdicj5hcmRDb250ZXh0LmphdmE6NTAzOCk8YnI+CiZndDsgYXQ8 YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kPHdicj5hcmRDb250ZXh0LnN0 YXJ0SW50ZXJuYWwoU3RhbmQ8d2JyPmFyZENvbnRleHQuamF2YTo1MzQ4KTxicj4KJmd0OyBhdCBv cmcuYXBhY2hlLmNhdGFsaW5hLnV0aWwuTGlmZWM8d2JyPnljbGVCYXNlLnN0YXJ0KExpZmVjeWNs ZUJhc2Uuajx3YnI+YXZhOjE0NSk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRh bGluYS5jb3JlLkNvbnRhPHdicj5pbmVyQmFzZS5hZGRDaGlsZEludGVybmFsKENvbnQ8d2JyPmFp bmVyQmFzZS5qYXZhOjc1Myk8YnI+CiZndDsgYXQgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLkNv bnRhPHdicj5pbmVyQmFzZS5hZGRDaGlsZChDb250YWluZXJCYXM8d2JyPmUuamF2YTo3MjkpPGJy PgomZ3Q7IGF0IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZDx3YnI+YXJkSG9zdC5hZGRD aGlsZChTdGFuZGFyZEhvc3QuPHdicj5qYXZhOjcxNyk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3Jn LmFwYWNoZS5jYXRhbGluYS5zdGFydHVwLkhvPHdicj5zdENvbmZpZy5kZXBsb3lEZXNjcmlwdG9y KEhvc3Q8d2JyPkNvbmZpZy5qYXZhOjYyMSk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNo ZS5jYXRhbGluYS5zdGFydHVwLkhvPHdicj5zdENvbmZpZyREZXBsb3lEZXNjcmlwdG9yLnJ1big8 d2JyPkhvc3RDb25maWcuamF2YToxODM1KTxicj4KJmd0OyBhdCBqYXZhLnV0aWwuY29uY3VycmVu dC5FeGVjdXRvcnM8d2JyPiRSdW5uYWJsZUFkYXB0ZXIuY2FsbChFeGVjdXRvcjx3YnI+cy5qYXZh OjUxMSk8YnI+CiZndDsgYXQgamF2YS51dGlsLmNvbmN1cnJlbnQuRnV0dXJlVGFzPHdicj5rLnJ1 bihGdXR1cmVUYXNrLmphdmE6MjY2KTxicj4KJmd0OyBhdDxicj4KJmd0OyBqYXZhLnV0aWwuY29u Y3VycmVudC5UaHJlYWRQb288d2JyPmxFeGVjdXRvci5ydW5Xb3JrZXIoVGhyZWFkUG9vbDx3YnI+ RXhlY3V0b3IuamF2YToxMTQ5KTxicj4KJmd0OyBhdDxicj4KJmd0OyBqYXZhLnV0aWwuY29uY3Vy cmVudC5UaHJlYWRQb288d2JyPmxFeGVjdXRvciRXb3JrZXIucnVuKFRocmVhZFBvbzx3YnI+bEV4 ZWN1dG9yLmphdmE6NjI0KTxicj4KJmd0OyBhdCBqYXZhLmxhbmcuVGhyZWFkLnJ1bihUaHJlYWQu amE8d2JyPnZhOjc0OCk8YnI+CiZndDs8YnI+CiZndDsgMTUtTm92LTIwMTcgMTI6MTQ6NTQuNTA5 IFNFVkVSRSBbaHR0cC1iaW8tODQ0My1leGVjLTFdPGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxp bmEuY29yZS5TdGFuZDx3YnI+YXJkSG9zdFZhbHZlLmludm9rZSBFeGNlcHRpb24gUHJvY2Vzc2lu Zzxicj4KJmd0OyAvY2EvcmVzdC9hY2NvdW50L2xvZ2luPGJyPgomZ3Q7wqAgPGEgaHJlZj0iaHR0 cDovL2phdmF4LndzLnJzIiB0YXJnZXQ9Il9ibGFuayI+amF2YXgud3MucnM8L2E+LlNlcnZpY2VV bmF2YWlsYWJsZTx3YnI+RXhjZXB0aW9uOiBTdWJzeXN0ZW0gdW5hdmFpbGFibGU8YnI+CiZndDsg YXQ8YnI+CiZndDsgY29tLm5ldHNjYXBlLmNtcy50b21jYXQuUHJveHlSPHdicj5lYWxtLmZpbmRT ZWN1cml0eUNvbnN0cmFpbnRzKFA8d2JyPnJveHlSZWFsbS5qYXZhOjEzOCk8YnI+CiZndDsgYXQ8 YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS5hdXRoZW50aWNhPHdicj50b3IuQXV0aGVudGlj YXRvckJhc2UuaW52b2tlKEE8d2JyPnV0aGVudGljYXRvckJhc2UuamF2YTo0OTgpPGJyPgomZ3Q7 IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZDx3YnI+YXJkSG9zdFZh bHZlLmludm9rZShTdGFuZGFyZEhvPHdicj5zdFZhbHZlLmphdmE6MTQxKTxicj4KJmd0OyBhdDxi cj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLnZhbHZlcy5FcnI8d2JyPm9yUmVwb3J0VmFsdmUu aW52b2tlKEVycm9yUmVwbzx3YnI+cnRWYWx2ZS5qYXZhOjc5KTxicj4KJmd0OyBhdDxicj4KJmd0 OyBvcmcuYXBhY2hlLmNhdGFsaW5hLnZhbHZlcy5BYnM8d2JyPnRyYWN0QWNjZXNzTG9nVmFsdmUu aW52b2tlKEFiczx3YnI+dHJhY3RBY2Nlc3NMb2dWYWx2ZS5qYXZhOjYyMCk8YnI+CiZndDsgYXQ8 YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kPHdicj5hcmRFbmdpbmVWYWx2 ZS5pbnZva2UoU3RhbmRhcmQ8d2JyPkVuZ2luZVZhbHZlLmphdmE6ODgpPGJyPgomZ3Q7IGF0PGJy PgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29ubmVjdG9yLjx3YnI+Q295b3RlQWRhcHRlci5z ZXJ2aWNlKENveW90ZUFkPHdicj5hcHRlci5qYXZhOjUwMik8YnI+CiZndDsgYXQ8YnI+CiZndDsg b3JnLmFwYWNoZS5jb3lvdGUuaHR0cDExLkFic3RyPHdicj5hY3RIdHRwMTFQcm9jZXNzb3IucHJv Y2VzcyhBYnM8d2JyPnRyYWN0SHR0cDExUHJvY2Vzc29yLmphdmE6MTEzMjx3YnI+KTxicj4KJmd0 OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNveW90ZS5BYnN0cmFjdFByb3Q8d2JyPm9jb2wkQWJz dHJhY3RDb25uZWN0aW9uSGFuZGxlcjx3YnI+LnByb2Nlc3MoQWJzdHJhY3RQcm90b2NvbC5qYXZh PHdicj46Njg0KTxicj4KJmd0OyBhdDxicj4KJmd0OyA8YSBocmVmPSJodHRwOi8vb3JnLmFwYWNo ZS50b21jYXQudXRpbC5uZXQiIHRhcmdldD0iX2JsYW5rIj5vcmcuYXBhY2hlLnRvbWNhdC51dGls Lm5ldDwvYT4uSklvPHdicj5FbmRwb2ludCRTb2NrZXRQcm9jZXNzb3IucnVuKEo8d2JyPklvRW5k cG9pbnQuamF2YToyODMpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGphdmEudXRpbC5jb25jdXJyZW50 LlRocmVhZFBvbzx3YnI+bEV4ZWN1dG9yLnJ1bldvcmtlcihUaHJlYWRQb29sPHdicj5FeGVjdXRv ci5qYXZhOjExNDkpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGphdmEudXRpbC5jb25jdXJyZW50LlRo cmVhZFBvbzx3YnI+bEV4ZWN1dG9yJFdvcmtlci5ydW4oVGhyZWFkUG9vPHdicj5sRXhlY3V0b3Iu amF2YTo2MjQpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUudG9tY2F0LnV0aWwudGhy ZWFkczx3YnI+LlRhc2tUaHJlYWQkV3JhcHBpbmdSdW5uYWJsZS5yPHdicj51bihUYXNrVGhyZWFk LmphdmE6NjEpPGJyPgomZ3Q7IGF0IGphdmEubGFuZy5UaHJlYWQucnVuKFRocmVhZC5qYTx3YnI+ dmE6NzQ4KTxicj4KJmd0Ozxicj4KJmd0OyAxNS1Ob3YtMjAxNyAxMzowNTo1NS44NzQgU0VWRVJF IFtsb2NhbGhvc3Qtc3RhcnRTdG9wLTFdPGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29y ZS5BcHBsaTx3YnI+Y2F0aW9uQ29udGV4dC5sb2cgU3RhbmRhcmRXcmFwcGVyLlRocm93YWJsZTxi cj4KJmd0O8KgIGphdmEubGFuZy5OdWxsUG9pbnRlckV4Y2VwdGlvbjxicj4KJmd0OyBhdDxicj4K Jmd0OyBjb20ubmV0c2NhcGUuY21zY29yZS5zZWxmdGVzdHM8d2JyPi5TZWxmVGVzdFN1YnN5c3Rl bS5zaHV0ZG93bihTZTx3YnI+bGZUZXN0U3Vic3lzdGVtLmphdmE6MTg4Nik8YnI+CiZndDsgYXQ8 YnI+CiZndDsgY29tLm5ldHNjYXBlLmNtc2NvcmUuYXBwcy5DTVNFPHdicj5uZ2luZS5zaHV0ZG93 blN1YnN5c3RlbXMoQ01TRW48d2JyPmdpbmUuamF2YToyMTE4KTxicj4KJmd0OyBhdCBjb20ubmV0 c2NhcGUuY21zY29yZS5hcHBzLkNNU0U8d2JyPm5naW5lLnNodXRkb3duKENNU0VuZ2luZS5qYXZh Ojx3YnI+MjAxMyk8YnI+CiZndDsgYXQgY29tLm5ldHNjYXBlLmNlcnRzcnYuYXBwcy5DTVMuPHdi cj5zaHV0ZG93bihDTVMuamF2YToyMzQpPGJyPgomZ3Q7IGF0IGNvbS5uZXRzY2FwZS5jZXJ0c3J2 LmFwcHMuQ01TLjx3YnI+c3RhcnQoQ01TLmphdmE6MTYzMCk8YnI+CiZndDsgYXQ8YnI+CiZndDsg Y29tLm5ldHNjYXBlLmNtcy5zZXJ2bGV0LmJhc2UuPHdicj5DTVNTdGFydFNlcnZsZXQuaW5pdChD TVNTdGFydFM8d2JyPmVydmxldC5qYXZhOjExNCk8YnI+CiZndDsgYXQgamF2YXguc2VydmxldC5H ZW5lcmljU2VydmxldC5pPHdicj5uaXQoR2VuZXJpY1NlcnZsZXQuamF2YToxNTgpPGJyPgomZ3Q7 IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZDx3YnI+YXJkV3JhcHBl ci5pbml0U2VydmxldChTdGFuZGFyPHdicj5kV3JhcHBlci5qYXZhOjEyMjcpPGJyPgomZ3Q7IGF0 PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZDx3YnI+YXJkV3JhcHBlci5s b2FkU2VydmxldChTdGFuZGFyPHdicj5kV3JhcHBlci5qYXZhOjExNDApPGJyPgomZ3Q7IGF0IG9y Zy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZDx3YnI+YXJkV3JhcHBlci5sb2FkKFN0YW5kYXJk V3JhcHBlPHdicj5yLmphdmE6MTAyNyk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNoZS5j YXRhbGluYS5jb3JlLlN0YW5kPHdicj5hcmRDb250ZXh0LmxvYWRPblN0YXJ0dXAoU3RhbmQ8d2Jy PmFyZENvbnRleHQuamF2YTo1MDM4KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNh dGFsaW5hLmNvcmUuU3RhbmQ8d2JyPmFyZENvbnRleHQuc3RhcnRJbnRlcm5hbChTdGFuZDx3YnI+ YXJkQ29udGV4dC5qYXZhOjUzNDgpPGJyPgomZ3Q7IGF0IG9yZy5hcGFjaGUuY2F0YWxpbmEudXRp bC5MaWZlYzx3YnI+eWNsZUJhc2Uuc3RhcnQoTGlmZWN5Y2xlQmFzZS5qPHdicj5hdmE6MTQ1KTxi cj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuQ29udGE8d2JyPmlu ZXJCYXNlLmFkZENoaWxkSW50ZXJuYWwoQ29udDx3YnI+YWluZXJCYXNlLmphdmE6NzUzKTxicj4K Jmd0OyBhdCBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuQ29udGE8d2JyPmluZXJCYXNlLmFkZENo aWxkKENvbnRhaW5lckJhczx3YnI+ZS5qYXZhOjcyOSk8YnI+CiZndDsgYXQgb3JnLmFwYWNoZS5j YXRhbGluYS5jb3JlLlN0YW5kPHdicj5hcmRIb3N0LmFkZENoaWxkKFN0YW5kYXJkSG9zdC48d2Jy PmphdmE6NzE3KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLnN0YXJ0 dXAuSG88d2JyPnN0Q29uZmlnLmRlcGxveURlc2NyaXB0b3IoSG9zdDx3YnI+Q29uZmlnLmphdmE6 NjIxKTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLnN0YXJ0dXAuSG88 d2JyPnN0Q29uZmlnJERlcGxveURlc2NyaXB0b3IucnVuKDx3YnI+SG9zdENvbmZpZy5qYXZhOjE4 MzUpPGJyPgomZ3Q7IGF0IGphdmEudXRpbC5jb25jdXJyZW50LkV4ZWN1dG9yczx3YnI+JFJ1bm5h YmxlQWRhcHRlci5jYWxsKEV4ZWN1dG9yPHdicj5zLmphdmE6NTExKTxicj4KJmd0OyBhdCBqYXZh LnV0aWwuY29uY3VycmVudC5GdXR1cmVUYXM8d2JyPmsucnVuKEZ1dHVyZVRhc2suamF2YToyNjYp PGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGphdmEudXRpbC5jb25jdXJyZW50LlRocmVhZFBvbzx3YnI+ bEV4ZWN1dG9yLnJ1bldvcmtlcihUaHJlYWRQb29sPHdicj5FeGVjdXRvci5qYXZhOjExNDkpPGJy PgomZ3Q7IGF0PGJyPgomZ3Q7IGphdmEudXRpbC5jb25jdXJyZW50LlRocmVhZFBvbzx3YnI+bEV4 ZWN1dG9yJFdvcmtlci5ydW4oVGhyZWFkUG9vPHdicj5sRXhlY3V0b3IuamF2YTo2MjQpPGJyPgom Z3Q7IGF0IGphdmEubGFuZy5UaHJlYWQucnVuKFRocmVhZC5qYTx3YnI+dmE6NzQ4KTxicj4KJmd0 Ozxicj4KJmd0OyAxNS1Ob3YtMjAxNyAxMzowNTo1NS44NzUgU0VWRVJFIFtsb2NhbGhvc3Qtc3Rh cnRTdG9wLTFdPGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFuZDx3YnI+YXJk Q29udGV4dC5sb2FkT25TdGFydHVwIFNlcnZsZXQgW2Nhc3RhcnRdPGJyPgomZ3Q7IGluIHdlYiBh cHBsaWNhdGlvbiBbL2NhXSB0aHJldyBsb2FkKCkgZXhjZXB0aW9uPGJyPgomZ3Q7wqAgamF2YS5s YW5nLk51bGxQb2ludGVyRXhjZXB0aW9uPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGNvbS5uZXRzY2Fw ZS5jbXNjb3JlLnNlbGZ0ZXN0czx3YnI+LlNlbGZUZXN0U3Vic3lzdGVtLnNodXRkb3duKFNlPHdi cj5sZlRlc3RTdWJzeXN0ZW0uamF2YToxODg2KTxicj4KJmd0OyBhdDxicj4KJmd0OyBjb20ubmV0 c2NhcGUuY21zY29yZS5hcHBzLkNNU0U8d2JyPm5naW5lLnNodXRkb3duU3Vic3lzdGVtcyhDTVNF bjx3YnI+Z2luZS5qYXZhOjIxMTgpPGJyPgomZ3Q7IGF0IGNvbS5uZXRzY2FwZS5jbXNjb3JlLmFw cHMuQ01TRTx3YnI+bmdpbmUuc2h1dGRvd24oQ01TRW5naW5lLmphdmE6PHdicj4yMDEzKTxicj4K Jmd0OyBhdCBjb20ubmV0c2NhcGUuY2VydHNydi5hcHBzLkNNUy48d2JyPnNodXRkb3duKENNUy5q YXZhOjIzNCk8YnI+CiZndDsgYXQgY29tLm5ldHNjYXBlLmNlcnRzcnYuYXBwcy5DTVMuPHdicj5z dGFydChDTVMuamF2YToxNjMwKTxicj4KJmd0OyBhdDxicj4KJmd0OyBjb20ubmV0c2NhcGUuY21z LnNlcnZsZXQuYmFzZS48d2JyPkNNU1N0YXJ0U2VydmxldC5pbml0KENNU1N0YXJ0Uzx3YnI+ZXJ2 bGV0LmphdmE6MTE0KTxicj4KJmd0OyBhdCBqYXZheC5zZXJ2bGV0LkdlbmVyaWNTZXJ2bGV0Lmk8 d2JyPm5pdChHZW5lcmljU2VydmxldC5qYXZhOjE1OCk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3Jn LmFwYWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kPHdicj5hcmRXcmFwcGVyLmluaXRTZXJ2bGV0KFN0 YW5kYXI8d2JyPmRXcmFwcGVyLmphdmE6MTIyNyk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFw YWNoZS5jYXRhbGluYS5jb3JlLlN0YW5kPHdicj5hcmRXcmFwcGVyLmxvYWRTZXJ2bGV0KFN0YW5k YXI8d2JyPmRXcmFwcGVyLmphdmE6MTE0MCk8YnI+CiZndDsgYXQgb3JnLmFwYWNoZS5jYXRhbGlu YS5jb3JlLlN0YW5kPHdicj5hcmRXcmFwcGVyLmxvYWQoU3RhbmRhcmRXcmFwcGU8d2JyPnIuamF2 YToxMDI3KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuU3Rh bmQ8d2JyPmFyZENvbnRleHQubG9hZE9uU3RhcnR1cChTdGFuZDx3YnI+YXJkQ29udGV4dC5qYXZh OjUwMzgpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFu ZDx3YnI+YXJkQ29udGV4dC5zdGFydEludGVybmFsKFN0YW5kPHdicj5hcmRDb250ZXh0LmphdmE6 NTM0OCk8YnI+CiZndDsgYXQgb3JnLmFwYWNoZS5jYXRhbGluYS51dGlsLkxpZmVjPHdicj55Y2xl QmFzZS5zdGFydChMaWZlY3ljbGVCYXNlLmo8d2JyPmF2YToxNDUpPGJyPgomZ3Q7IGF0PGJyPgom Z3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5Db250YTx3YnI+aW5lckJhc2UuYWRkQ2hpbGRJ bnRlcm5hbChDb250PHdicj5haW5lckJhc2UuamF2YTo3NTMpPGJyPgomZ3Q7IGF0IG9yZy5hcGFj aGUuY2F0YWxpbmEuY29yZS5Db250YTx3YnI+aW5lckJhc2UuYWRkQ2hpbGQoQ29udGFpbmVyQmFz PHdicj5lLmphdmE6NzI5KTxicj4KJmd0OyBhdCBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuU3Rh bmQ8d2JyPmFyZEhvc3QuYWRkQ2hpbGQoU3RhbmRhcmRIb3N0Ljx3YnI+amF2YTo3MTcpPGJyPgom Z3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuc3RhcnR1cC5Ibzx3YnI+c3RDb25m aWcuZGVwbG95RGVzY3JpcHRvcihIb3N0PHdicj5Db25maWcuamF2YTo2MjEpPGJyPgomZ3Q7IGF0 PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuc3RhcnR1cC5Ibzx3YnI+c3RDb25maWckRGVw bG95RGVzY3JpcHRvci5ydW4oPHdicj5Ib3N0Q29uZmlnLmphdmE6MTgzNSk8YnI+CiZndDsgYXQg amF2YS51dGlsLmNvbmN1cnJlbnQuRXhlY3V0b3JzPHdicj4kUnVubmFibGVBZGFwdGVyLmNhbGwo RXhlY3V0b3I8d2JyPnMuamF2YTo1MTEpPGJyPgomZ3Q7IGF0IGphdmEudXRpbC5jb25jdXJyZW50 LkZ1dHVyZVRhczx3YnI+ay5ydW4oRnV0dXJlVGFzay5qYXZhOjI2Nik8YnI+CiZndDsgYXQ8YnI+ CiZndDsgamF2YS51dGlsLmNvbmN1cnJlbnQuVGhyZWFkUG9vPHdicj5sRXhlY3V0b3IucnVuV29y a2VyKFRocmVhZFBvb2w8d2JyPkV4ZWN1dG9yLmphdmE6MTE0OSk8YnI+CiZndDsgYXQ8YnI+CiZn dDsgamF2YS51dGlsLmNvbmN1cnJlbnQuVGhyZWFkUG9vPHdicj5sRXhlY3V0b3IkV29ya2VyLnJ1 bihUaHJlYWRQb288d2JyPmxFeGVjdXRvci5qYXZhOjYyNCk8YnI+CiZndDsgYXQgamF2YS5sYW5n LlRocmVhZC5ydW4oVGhyZWFkLmphPHdicj52YTo3NDgpPGJyPgomZ3Q7PGJyPgomZ3Q7IDE1LU5v di0yMDE3IDEzOjA1OjU5LjcwNiBTRVZFUkUgW2h0dHAtYmlvLTg0NDMtZXhlYy0xXTxicj4KJmd0 OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuU3RhbmQ8d2JyPmFyZEhvc3RWYWx2ZS5pbnZva2Ug RXhjZXB0aW9uIFByb2Nlc3Npbmc8YnI+CiZndDsgL2NhL3Jlc3QvYWNjb3VudC9sb2dpbjxicj4K Jmd0O8KgIDxhIGhyZWY9Imh0dHA6Ly9qYXZheC53cy5ycyIgdGFyZ2V0PSJfYmxhbmsiPmphdmF4 LndzLnJzPC9hPi5TZXJ2aWNlVW5hdmFpbGFibGU8d2JyPkV4Y2VwdGlvbjogU3Vic3lzdGVtIHVu YXZhaWxhYmxlPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IGNvbS5uZXRzY2FwZS5jbXMudG9tY2F0LlBy b3h5Ujx3YnI+ZWFsbS5maW5kU2VjdXJpdHlDb25zdHJhaW50cyhQPHdicj5yb3h5UmVhbG0uamF2 YToxMzgpPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuYXV0aGVudGlj YTx3YnI+dG9yLkF1dGhlbnRpY2F0b3JCYXNlLmludm9rZShBPHdicj51dGhlbnRpY2F0b3JCYXNl LmphdmE6NDk4KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUu U3RhbmQ8d2JyPmFyZEhvc3RWYWx2ZS5pbnZva2UoU3RhbmRhcmRIbzx3YnI+c3RWYWx2ZS5qYXZh OjE0MSk8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS52YWx2ZXMuRXJy PHdicj5vclJlcG9ydFZhbHZlLmludm9rZShFcnJvclJlcG88d2JyPnJ0VmFsdmUuamF2YTo3OSk8 YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNoZS5jYXRhbGluYS52YWx2ZXMuQWJzPHdicj50 cmFjdEFjY2Vzc0xvZ1ZhbHZlLmludm9rZShBYnM8d2JyPnRyYWN0QWNjZXNzTG9nVmFsdmUuamF2 YTo2MjApPGJyPgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS5TdGFu ZDx3YnI+YXJkRW5naW5lVmFsdmUuaW52b2tlKFN0YW5kYXJkPHdicj5FbmdpbmVWYWx2ZS5qYXZh Ojg4KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvbm5lY3Rvci48 d2JyPkNveW90ZUFkYXB0ZXIuc2VydmljZShDb3lvdGVBZDx3YnI+YXB0ZXIuamF2YTo1MDIpPGJy PgomZ3Q7IGF0PGJyPgomZ3Q7IG9yZy5hcGFjaGUuY295b3RlLmh0dHAxMS5BYnN0cjx3YnI+YWN0 SHR0cDExUHJvY2Vzc29yLnByb2Nlc3MoQWJzPHdicj50cmFjdEh0dHAxMVByb2Nlc3Nvci5qYXZh OjExMzI8d2JyPik8YnI+CiZndDsgYXQ8YnI+CiZndDsgb3JnLmFwYWNoZS5jb3lvdGUuQWJzdHJh Y3RQcm90PHdicj5vY29sJEFic3RyYWN0Q29ubmVjdGlvbkhhbmRsZXI8d2JyPi5wcm9jZXNzKEFi c3RyYWN0UHJvdG9jb2wuamF2YTx3YnI+OjY4NCk8YnI+CiZndDsgYXQ8YnI+CiZndDsgPGEgaHJl Zj0iaHR0cDovL29yZy5hcGFjaGUudG9tY2F0LnV0aWwubmV0IiB0YXJnZXQ9Il9ibGFuayI+b3Jn LmFwYWNoZS50b21jYXQudXRpbC5uZXQ8L2E+LkpJbzx3YnI+RW5kcG9pbnQkU29ja2V0UHJvY2Vz c29yLnJ1bihKPHdicj5Jb0VuZHBvaW50LmphdmE6MjgzKTxicj4KJmd0OyBhdDxicj4KJmd0OyBq YXZhLnV0aWwuY29uY3VycmVudC5UaHJlYWRQb288d2JyPmxFeGVjdXRvci5ydW5Xb3JrZXIoVGhy ZWFkUG9vbDx3YnI+RXhlY3V0b3IuamF2YToxMTQ5KTxicj4KJmd0OyBhdDxicj4KJmd0OyBqYXZh LnV0aWwuY29uY3VycmVudC5UaHJlYWRQb288d2JyPmxFeGVjdXRvciRXb3JrZXIucnVuKFRocmVh ZFBvbzx3YnI+bEV4ZWN1dG9yLmphdmE6NjI0KTxicj4KJmd0OyBhdDxicj4KJmd0OyBvcmcuYXBh Y2hlLnRvbWNhdC51dGlsLnRocmVhZHM8d2JyPi5UYXNrVGhyZWFkJFdyYXBwaW5nUnVubmFibGUu cjx3YnI+dW4oVGFza1RocmVhZC5qYXZhOjYxKTxicj4KJmd0OyBhdCBqYXZhLmxhbmcuVGhyZWFk LnJ1bihUaHJlYWQuamE8d2JyPnZhOjc0OCk8YnI+CiZndDs8YnI+CiZndDs8YnI+CiZndDsgT24g MTUgTm92ZW1iZXIgMjAxNyBhdCAxMzoyMywgRGF2aWQgSGFydmV5ICZsdDs8YSBocmVmPSJtYWls dG86ZGF2aWRjaGFydmV5QGdvb2dsZW1haWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+ZGF2aWRjaGFy dmV5QGdvb2dsZW1haWwuY29tPC9hPjxicj4KPC9kaXY+PGRpdiBjbGFzcz0ibV8yNDI5ODkxMDI1 NDk1NDUzMDM5bV82MzM5MjkxOTkwMjIzMzIyMjRlbGlkZWQtdGV4dCI+Jmd0OyAmbHQ7bWFpbHRv OjxhIGhyZWY9Im1haWx0bzpkYXZpZGNoYXJ2ZXlAZ29vZ2xlbWFpbC5jb20iIHRhcmdldD0iX2Js YW5rIj5kYXZpZGNoYXJ2ZXlAZ29vZ2xlbWFpPHdicj5sLmNvbTwvYT4mZ3Q7Jmd0OyB3cm90ZTo8 YnI+CiZndDs8YnI+CiZndDvCoCDCoCDCoEhpIHdpc2RvbSBvZiB0aGUgbGlzdCw8YnI+CiZndDs8 YnI+CiZndDvCoCDCoCDCoEkga25vdyBJIGFtIGFuIGVkZ2UgY2FzZSB3aXRoIHJ1bm5pbmcgb24g dWJ1bnR1LCBidXQgaG9wZWQgc29tZW9uZTxicj4KJmd0O8KgIMKgIMKgbWlnaHQgYmUgYWJsZSB0 byBzaGVkIHNvbWUgbGlnaHQuPGJyPgomZ3Q7PGJyPgomZ3Q7wqAgwqAgwqBBIGJpdCBvZiBiYWNr Z3JvdW5kLsKgIEkmIzM5O20gdHJ5aW5nIHRvIHRlc3QgdXBncmFkZXMgd2l0aG91dDxicj4KJmd0 O8KgIMKgIMKgcG90ZW50aWFsbHkgaG9zaW5nIG15IGV4aXN0aW5nIHNlcnZpY2VzLCBzbyBJIGhh dmUgY2xvbmVkIHRoZSBWTSw8YnI+CiZndDvCoCDCoCDCoGdpdmVuIGl0IGEgbmV3IElQIGFkZHJl c3MsIHVwZGF0ZWQgaG9zdHMgZmlsZSBhbmQgcG9pbnRlZCBETlM8YnI+CiZndDvCoCDCoCDCoHNv bWV3aGVyZSB0aGF0IGRvZXNuJiMzOTt0IGtub3cgYWJvdXQgdGhlIHJlYWwgSVBBIHNlcnZpY2Vz ICg4LjguOC44KSBzbzxicj4KJmd0O8KgIMKgIMKgaXQgd29uJiMzOTt0IHRyeSBhbmQgc3luYyBv ciByZXBsaWNhdGUuPGJyPgomZ3Q7PGJyPgomZ3Q7wqAgwqAgwqBBdHRlbXB0aW5nIHRvIHVwZ3Jh ZGUgaGl0cyBhIHNuYWdzIG9yIHR3bywgc29tZSBkZXNjcmliZWQgaW4gYnVnczxicj4KJmd0O8Kg IMKgIMKgYWxyZWFkeSBsaWtlIHRoZSBwa2kgdmVyc2lvbiBudW1iZXIgY29uZnVzaW5nIHRoZSBh cHQ8YnI+CiZndDvCoCDCoCDCoHNjcmlwdHMgPGEgaHJlZj0iaHR0cHM6Ly9idWdzLmxhdW5jaHBh ZC5uZXQvdWJ1bnR1Lytzb3VyY2UvZnJlZWlwYS8rYnVnLzE3MDMwNTEiIHJlbD0ibm9yZWZlcnJl ciIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vYnVncy5sYXVuY2hwYWQubmV0L3VidTx3YnI+bnR1 Lytzb3VyY2UvZnJlZWlwYS8rYnVnLzE3MDMwPHdicj41MTwvYT48YnI+CiZndDvCoCDCoCDCoCZs dDs8YSBocmVmPSJodHRwczovL2J1Z3MubGF1bmNocGFkLm5ldC91YnVudHUvK3NvdXJjZS9mcmVl aXBhLytidWcvMTcwMzA1MSIgcmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6 Ly9idWdzLmxhdW5jaHBhZC5uZXQvdTx3YnI+YnVudHUvK3NvdXJjZS9mcmVlaXBhLytidWcvMTcw PHdicj4zMDUxPC9hPiZndDsgKS48YnI+CiZndDvCoCDCoCDCoFRoZSBvbmUgSSBjYW4mIzM5O3Qg d29yayBhcm91bmQgaG93ZXZlciBpcyBiZWxvdy48YnI+CiZndDs8YnI+CiZndDvCoCDCoCDCoEl0 IHNlZW1zIGRlZXBseSB1bmhhcHB5LCBhbmQgcmVzdGFydGluZyB0aGUgc2VydmljZXMgcmVzdWx0 IGluIHRoZTxicj4KJmd0O8KgIMKgIMKgZG9ndGFnLXBraSB3ZWIgcGFnZSBiZWluZyBhdmFpbGFi bGUgdW50aWwgYSBsb2dpbiBhdHRlbXB0IGlzIG1hZGU8YnI+CiZndDvCoCDCoCDCoChhcyBvY2N1 cnMgZHVyaW5nIHRoZSBpcGEtc2VydmVyLXVwZ3JhZGUpIGFmdGVyIHdoaWNoIHBvaW50IGl0IGJv bWJzPGJyPgomZ3Q7wqAgwqAgwqB3aXRoIGEgNTAwIGVycm9yLjxicj4KJmd0Ozxicj4KJmd0O8Kg IMKgIMKgQ291bGQgdGhlIGJlbG93IGNhdXNlZDxicj4KJmd0O8KgIMKgIMKgYnkgPGEgaHJlZj0i aHR0cHM6Ly9idWdzLmxhdW5jaHBhZC5uZXQvdWJ1bnR1Lytzb3VyY2UvZnJlZWlwYS8rYnVnLzE3 MTY4NDIiIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vYnVncy5sYXVu Y2hwYWQubmV0L3VidTx3YnI+bnR1Lytzb3VyY2UvZnJlZWlwYS8rYnVnLzE3MTY4PHdicj40Mjwv YT48YnI+CiZndDvCoCDCoCDCoCZsdDs8YSBocmVmPSJodHRwczovL2J1Z3MubGF1bmNocGFkLm5l dC91YnVudHUvK3NvdXJjZS9mcmVlaXBhLytidWcvMTcxNjg0MiIgcmVsPSJub3JlZmVycmVyIiB0 YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly9idWdzLmxhdW5jaHBhZC5uZXQvdTx3YnI+YnVudHUvK3Nv dXJjZS9mcmVlaXBhLytidWcvMTcxPHdicj42ODQyPC9hPiZndDsgPzxicj4KJmd0Ozxicj4KJmd0 O8KgIMKgIMKgQW55IGFkdmljZSBhcHByZWNpYXRlZCwgYXMgSSB0aGluayBldmVuIHdoZW4gMTgu MDQgaGl0cyB3aXRoIHRoZTxicj4KJmd0O8KgIMKgIMKgcHJvcG9zZWQgdXBkYXRlcyB0byByZWx5 IG9uIHRvIHRvbWNhdCA4LjUsIEkmIzM5O2xsIHN0aWxsIG5lZWQgdG88YnI+CiZndDvCoCDCoCDC oHVwZ3JhZGUgdmlhIDE3LjEwIHdoaWNoIHNlZW1zIGN1cnJlbnRseSBmcmF1Z2h0IcKgIElmIGl0 IHJlbGF0ZXMgdG88YnI+CiZndDvCoCDCoCDCoG15IG1ldGhvZCBvZiBjbG9uaW5nIHRoZSBWTSwg aXMgdGhlcmUgYSBiZXR0ZXIgd2F5IG9mIHRlc3Rpbmc8YnI+CiZndDvCoCDCoCDCoHVwZ3JhZGVz IHdpdGhvdXQgcG90ZW50aWFsbHkgaG9zaW5nIHRoZSBleGlzdGluZyBsaXZlIHN5c3RlbXM/PGJy PgomZ3Q7PGJyPgomZ3Q7PGJyPgomZ3Q7wqAgwqAgwqBUaGFua3MgaW4gYWR2YW5jZSw8YnI+CiZn dDs8YnI+CiZndDvCoCDCoCDCoERhdmlkPGJyPgomZ3Q7PGJyPgomZ3Q7wqAgwqAgwqAyMDE3LTEx LTE1VDEzOjA1OjU5WiBERUJVRyBhcHByb3ZlZF91c2FnZSA9IFNTTCBTZXJ2ZXI8YnI+CiZndDvC oCDCoCDCoGludGVuZGVkX3VzYWdlID0gU1NMIFNlcnZlcjxicj4KJmd0O8KgIMKgIMKgMjAxNy0x MS0xNVQxMzowNTo1OVogREVCVUcgY2VydCB2YWxpZCBUcnVlIGZvciAmcXVvdDtDTj08YSBocmVm PSJodHRwOi8vaXBhMS5teS5uZXQiIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsiPmlw YTEubXkubmV0PC9hPjxicj4KPC9kaXY+Jmd0O8KgIMKgIMKgJmx0OzxhIGhyZWY9Imh0dHA6Ly9p cGExLm15Lm5ldCIgcmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+aHR0cDovL2lwYTEu bXkubmV0PC9hPiZndDssTz08YSBocmVmPSJodHRwOi8vVEhPTUFDLk5FVCIgcmVsPSJub3JlZmVy cmVyIiB0YXJnZXQ9Il9ibGFuayI+VEhPTUFDPHdicj4uTkVUPC9hPiAmbHQ7PGEgaHJlZj0iaHR0 cDovL1RIT01BQy5ORVQiIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsiPmh0dHA6Ly9U SE9NQUMuTkVUPC9hPiZndDsmcXVvdDs8YnI+CjxkaXYgY2xhc3M9Im1fMjQyOTg5MTAyNTQ5NTQ1 MzAzOW1fNjMzOTI5MTk5MDIyMzMyMjI0ZWxpZGVkLXRleHQiPiZndDvCoCDCoCDCoDIwMTctMTEt MTVUMTM6MDU6NTlaIERFQlVHIGhhbmRzaGFrZSBjb21wbGV0ZSwgcGVlciA9IElQQUREUkVTUzxi cj4KJmd0O8KgIMKgIMKgMjAxNy0xMS0xNVQxMzowNTo1OVogREVCVUcgUHJvdG9jb2w6IFRMUzEu Mjxicj4KJmd0O8KgIMKgIMKgMjAxNy0xMS0xNVQxMzowNTo1OVogREVCVUcgQ2lwaGVyOiBUTFNf UlNBX1dJVEhfQUVTXzEyOF9DQkNfU0hBPGJyPgomZ3Q7wqAgwqAgwqAyMDE3LTExLTE1VDEzOjA1 OjU5WiBERUJVRyByZXNwb25zZSBzdGF0dXMgNTAwPGJyPgomZ3Q7wqAgwqAgwqAyMDE3LTExLTE1 VDEzOjA1OjU5WiBERUJVRyByZXNwb25zZSBoZWFkZXJzIHsmIzM5O2NvbnRlbnQtbGVuZ3RoJiMz OTs6PGJyPgomZ3Q7wqAgwqAgwqAmIzM5OzIyOTImIzM5OywgJiMzOTtjb250ZW50LWxhbmd1YWdl JiMzOTs6ICYjMzk7ZW4mIzM5OywgJiMzOTtzZXJ2ZXImIzM5OzogJiMzOTtBcGFjaGUtQ295b3Rl LzEuMSYjMzk7LDxicj4KJmd0O8KgIMKgIMKgJiMzOTtjb25uZWN0aW9uJiMzOTs6ICYjMzk7Y2xv c2UmIzM5OywgJiMzOTtkYXRlJiMzOTs6ICYjMzk7V2VkLCAxNSBOb3YgMjAxNyAxMzowNTo1OSBH TVQmIzM5Oyw8YnI+CiZndDvCoCDCoCDCoCYjMzk7Y29udGVudC10eXBlJiMzOTs6ICYjMzk7dGV4 dC9odG1sO2NoYXJzZXQ9dXRmLTgmIzM5O308YnI+CiZndDvCoCDCoCDCoDIwMTctMTEtMTVUMTM6 MDU6NTlaIERFQlVHIHJlc3BvbnNlIGJvZHkgJiMzOTsmbHQ7IURPQ1RZUEU8YnI+CiZndDvCoCDC oCDCoGh0bWwmZ3Q7Jmx0O2h0bWwmZ3Q7Jmx0O2hlYWQmZ3Q7Jmx0O3RpdGxlJmd0O0FwYWNoPHdi cj5lIFRvbWNhdC84LjAuNDYgKFVidW50dSkgLSBFcnJvcjxicj4KJmd0O8KgIMKgIMKgcmVwb3J0 Jmx0Oy90aXRsZSZndDsmbHQ7c3R5bGUgdHlwZT0mcXVvdDt0ZXh0L2NzcyZxdW90OyZndDtIMTxi cj4KJmd0O8KgIMKgIMKge2ZvbnQtZmFtaWx5OlRhaG9tYSxBcmlhbCxzYW48d2JyPnMtc2VyaWY7 Y29sb3I6d2hpdGU7YmFja2dyb3VuZDx3YnI+LWNvbG9yOiM1MjVENzY7Zm9udC1zaXplOjIycHg7 PHdicj59PGJyPgomZ3Q7wqAgwqAgwqBIMjxicj4KJmd0O8KgIMKgIMKge2ZvbnQtZmFtaWx5OlRh aG9tYSxBcmlhbCxzYW48d2JyPnMtc2VyaWY7Y29sb3I6d2hpdGU7YmFja2dyb3VuZDx3YnI+LWNv bG9yOiM1MjVENzY7Zm9udC1zaXplOjE2cHg7PHdicj59PGJyPgomZ3Q7wqAgwqAgwqBIMzxicj4K Jmd0O8KgIMKgIMKge2ZvbnQtZmFtaWx5OlRhaG9tYSxBcmlhbCxzYW48d2JyPnMtc2VyaWY7Y29s b3I6d2hpdGU7YmFja2dyb3VuZDx3YnI+LWNvbG9yOiM1MjVENzY7Zm9udC1zaXplOjE0cHg7PHdi cj59PGJyPgomZ3Q7wqAgwqAgwqBCT0RZPGJyPgomZ3Q7wqAgwqAgwqB7Zm9udC1mYW1pbHk6VGFo b21hLEFyaWFsLHNhbjx3YnI+cy1zZXJpZjtjb2xvcjpibGFjaztiYWNrZ3JvdW5kPHdicj4tY29s b3I6d2hpdGU7fTxicj4KJmd0O8KgIMKgIMKgQjxicj4KJmd0O8KgIMKgIMKge2ZvbnQtZmFtaWx5 OlRhaG9tYSxBcmlhbCxzYW48d2JyPnMtc2VyaWY7Y29sb3I6d2hpdGU7YmFja2dyb3VuZDx3YnI+ LWNvbG9yOiM1MjVENzY7fTxicj4KJmd0O8KgIMKgIMKgUDxicj4KJmd0O8KgIMKgIMKge2ZvbnQt ZmFtaWx5OlRhaG9tYSxBcmlhbCxzYW48d2JyPnMtc2VyaWY7YmFja2dyb3VuZDp3aGl0ZTtjb2xv cjx3YnI+OmJsYWNrO2ZvbnQtc2l6ZToxMnB4O31BPGJyPgomZ3Q7wqAgwqAgwqB7Y29sb3IgOiBi bGFjazt9QS5uYW1lIHtjb2xvciA6IGJsYWNrO30ubGluZSB7aGVpZ2h0OiAxcHg7PGJyPgomZ3Q7 wqAgwqAgwqBiYWNrZ3JvdW5kLWNvbG9yOiAjNTI1RDc2OyBib3JkZXI6IG5vbmU7fSZsdDsvc3R5 bGUmZ3Q7PGJyPgomZ3Q7wqAgwqAgwqAmbHQ7L2hlYWQmZ3Q7Jmx0O2JvZHkmZ3Q7Jmx0O2gxJmd0 O0hUVFAgU3RhdHVzIDUwMCAtIFN1YnN5c3RlbSB1bmF2YWlsYWJsZSZsdDsvaDEmZ3Q7Jmx0O2Rp djxicj4KJmd0O8KgIMKgIMKgY2xhc3M9JnF1b3Q7bGluZSZxdW90OyZndDsmbHQ7L2RpdiZndDsm bHQ7cCZndDsmbHQ7YiZndDt0eXBlPHdicj4mbHQ7L2ImZ3Q7IEV4Y2VwdGlvbjxicj4KJmd0O8Kg IMKgIMKgcmVwb3J0Jmx0Oy9wJmd0OyZsdDtwJmd0OyZsdDtiJmd0O21lc3NhZ2UmbHQ7L2ImZ3Q7 ICZsdDt1Jmd0O1N1YnN5c3RlbTxicj4KJmd0O8KgIMKgIMKgdW5hdmFpbGFibGUmbHQ7L3UmZ3Q7 Jmx0Oy9wJmd0OyZsdDtwJmd0OyZsdDtiJmd0O2Rlc2M8d2JyPnJpcHRpb24mbHQ7L2ImZ3Q7ICZs dDt1Jmd0O1RoZSBzZXJ2ZXIgZW5jb3VudGVyZWQ8YnI+CiZndDvCoCDCoCDCoGFuIGludGVybmFs IGVycm9yIHRoYXQgcHJldmVudGVkIGl0IGZyb20gZnVsZmlsbGluZyB0aGlzPGJyPgomZ3Q7wqAg wqAgwqByZXF1ZXN0LiZsdDsvdSZndDsmbHQ7L3AmZ3Q7Jmx0O3AmZ3Q7Jmx0O2ImZ3Q7ZXhjZXB0 aTx3YnI+b24mbHQ7L2ImZ3Q7Jmx0Oy9wJmd0OyZsdDtwcmUmZ3Q7PGEgaHJlZj0iaHR0cDovL2ph dmF4LndzLnJzIiByZWw9Im5vcmVmZXJyZXIiIHRhcmdldD0iX2JsYW5rIj5qYXZheC53cy5yczwv YT48YnI+CjwvZGl2PiZndDvCoCDCoCDCoCZsdDs8YSBocmVmPSJodHRwOi8vd3MucnMiIHJlbD0i bm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsiPmh0dHA6Ly93cy5yczwvYT4mZ3Q7LlNlcnZpY2VV bmF2YWlsPHdicj5hYmxlRXhjZXB0aW9uOiBTdWJzeXN0ZW08YnI+CjxkaXYgY2xhc3M9Im1fMjQy OTg5MTAyNTQ5NTQ1MzAzOW1fNjMzOTI5MTk5MDIyMzMyMjI0ZWxpZGVkLXRleHQiPiZndDvCoCDC oCDCoHVuYXZhaWxhYmxlXG5cdGNvbS5uZXRzY2FwZS5jPHdicj5tcy50b21jYXQuUHJveHlSZWFs bS5maW5kU2VjdXI8d2JyPml0eUNvbnN0cmFpbnRzKFByb3h5UmVhbG0uamF2YTx3YnI+OjEzOClc blx0b3JnLmFwYWNoZS5jYXRhbGluYS48d2JyPmF1dGhlbnRpY2F0b3IuQXV0aGVudGljYXRvckJh czx3YnI+ZS5pbnZva2UoQXV0aGVudGljYXRvckJhc2UuPHdicj5qYXZhOjQ5OClcblx0b3JnLmFw YWNoZS5jYXRhbGk8d2JyPm5hLnZhbHZlcy5FcnJvclJlcG9ydFZhbHZlLjx3YnI+aW52b2tlKEVy cm9yUmVwb3J0VmFsdmUuamF2YTo8d2JyPjc5KVxuXHRvcmcuYXBhY2hlLmNhdGFsaW5hLjx3YnI+ dmFsdmVzLkFic3RyYWN0QWNjZXNzTG9nVmFsdmUuPHdicj5pbnZva2UoQWJzdHJhY3RBY2Nlc3NM b2dWYWx2ZS48d2JyPmphdmE6NjIwKVxuXHRvcmcuYXBhY2hlLjx3YnI+Y2F0YWxpbmEuY29ubmVj dG9yLkNveW90ZUFkYXB0PHdicj5lci5zZXJ2aWNlKENveW90ZUFkYXB0ZXIuamF2YTo8d2JyPjUw Milcblx0b3JnLmFwYWNoZS5jb3lvdGUuPHdicj5odHRwMTEuQWJzdHJhY3RIdHRwMTFQcm9jZXNz b3I8d2JyPi5wcm9jZXNzKEFic3RyYWN0SHR0cDExUHJvY2Vzczx3YnI+b3IuamF2YToxMTMyKVxu XHRvcmcuYXBhY2hlLjx3YnI+Y295b3RlLkFic3RyYWN0UHJvdG9jb2wkPHdicj5BYnN0cmFjdENv bm5lY3Rpb25IYW5kbGVyLjx3YnI+cHJvY2VzcyhBYnN0cmFjdFByb3RvY29sLmphdmE6PHdicj42 ODQpXG5cPGEgaHJlZj0iaHR0cDovL3RvcmcuYXBhY2hlLnRvbWNhdC51dGlsLm5ldCIgdGFyZ2V0 PSJfYmxhbmsiPnRvcmcuYXBhY2hlLnRvbWNhdC48d2JyPnV0aWwubmV0PC9hPi5KSW9FbmRwb2lu dCQ8d2JyPlNvY2tldFByb2Nlc3Nvci5ydW4oPHdicj5KSW9FbmRwb2ludC5qYXZhOjI4Mylcblx0 amF2YS48d2JyPnV0aWwuY29uY3VycmVudC5UaHJlYWRQb29sRXhlYzx3YnI+dXRvci5ydW5Xb3Jr ZXIoVGhyZWFkUG9vbEV4ZWN1PHdicj50b3IuamF2YToxMTQ5KVxuXHRqYXZhLnV0aWwuPHdicj5j b25jdXJyZW50LlRocmVhZFBvb2xFeGVjdXRvciQ8d2JyPldvcmtlci5ydW4oVGhyZWFkUG9vbEV4 ZWN1dG9yLjx3YnI+amF2YTo2MjQpXG5cdG9yZy5hcGFjaGUudG9tY2F0PHdicj4udXRpbC50aHJl YWRzLlRhc2tUaHJlYWQkPHdicj5XcmFwcGluZ1J1bm5hYmxlLnJ1big8d2JyPlRhc2tUaHJlYWQu amF2YTo2MSlcblx0amF2YS48d2JyPmxhbmcuVGhyZWFkLnJ1bihUaHJlYWQuamF2YTo8d2JyPjc0 OClcbiZsdDsvcHJlJmd0OyZsdDtwJmd0OyZsdDtiJmd0O25vdGUmbHQ7L2ImZ3Q7PGJyPgomZ3Q7 wqAgwqAgwqAmbHQ7dSZndDtUaGUgZnVsbCBzdGFjayB0cmFjZSBvZiB0aGUgcm9vdCBjYXVzZSBp cyBhdmFpbGFibGUgaW4gdGhlIEFwYWNoZTxicj4KJmd0O8KgIMKgIMKgVG9tY2F0LzguMC40NiAo VWJ1bnR1KSBsb2dzLiZsdDsvdSZndDsmbHQ7L3AmZ3Q7Jmx0O2hyIGNsYXNzPSZxdW90O2xpbmUm cXVvdDsmZ3Q7Jmx0O2gzJmd0O0FwYWNoZTxicj4KJmd0O8KgIMKgIMKgVG9tY2F0LzguMC40NiAo VWJ1bnR1KSZsdDsvaDMmZ3Q7Jmx0Oy9ib2R5Jmd0OyZsdDsvaHRtbCZndDsmIzM5Ozxicj4KJmd0 O8KgIMKgIMKgMjAxNy0xMS0xNVQxMzowNTo1OVogRVJST1IgSVBBIHNlcnZlciB1cGdyYWRlIGZh aWxlZDogSW5zcGVjdDxicj4KJmd0O8KgIMKgIMKgL3Zhci9sb2cvaXBhdXBncmFkZS5sb2cgYW5k IHJ1biBjb21tYW5kIGlwYS1zZXJ2ZXItdXBncmFkZSBtYW51YWxseS48YnI+CiZndDvCoCDCoCDC oDIwMTctMTEtMTVUMTM6MDU6NTlaIERFQlVHwqAgwqBGaWxlPGJyPgomZ3Q7wqAgwqAgwqAmcXVv dDsvdXNyL2xpYi9weXRob24yLjcvZGlzdC1wYWNrPHdicj5hZ2VzL2lwYXB5dGhvbi9hZG1pbnRv b2wucHkmcXVvdDssIGxpbmUgMTcyLDxicj4KJmd0O8KgIMKgIMKgaW4gZXhlY3V0ZTxicj4KJmd0 O8KgIMKgIMKgIMKgIMKgcmV0dXJuX3ZhbHVlID0gc2VsZi5ydW4oKTxicj4KJmd0O8KgIMKgIMKg IMKgRmlsZTxicj4KJmd0O8KgIMKgIMKgJnF1b3Q7L3Vzci9saWIvcHl0aG9uMi43L2Rpc3QtcGFj azx3YnI+YWdlcy9pcGFzZXJ2ZXIvaW5zdGFsbC9pcGFfc2VyPHdicj52ZXJfdXBncmFkZS5weSZx dW90Oyw8YnI+CiZndDvCoCDCoCDCoGxpbmUgNDYsIGluIHJ1bjxicj4KJmd0O8KgIMKgIMKgIMKg IMKgc2VydmVyLnVwZ3JhZGUoKTxicj4KJmd0O8KgIMKgIMKgIMKgRmlsZTxicj4KJmd0O8KgIMKg IMKgJnF1b3Q7L3Vzci9saWIvcHl0aG9uMi43L2Rpc3QtcGFjazx3YnI+YWdlcy9pcGFzZXJ2ZXIv aW5zdGFsbC9zZXJ2ZXIvPHdicj51cGdyYWRlLnB5JnF1b3Q7LDxicj4KJmd0O8KgIMKgIMKgbGlu ZSAxODc4LCBpbiB1cGdyYWRlPGJyPgomZ3Q7wqAgwqAgwqAgwqAgwqB1cGdyYWRlX2NvbmZpZ3Vy YXRpb24oKTxicj4KJmd0O8KgIMKgIMKgIMKgRmlsZTxicj4KJmd0O8KgIMKgIMKgJnF1b3Q7L3Vz ci9saWIvcHl0aG9uMi43L2Rpc3QtcGFjazx3YnI+YWdlcy9pcGFzZXJ2ZXIvaW5zdGFsbC9zZXJ2 ZXIvPHdicj51cGdyYWRlLnB5JnF1b3Q7LDxicj4KJmd0O8KgIMKgIMKgbGluZSAxNzk3LCBpbiB1 cGdyYWRlX2NvbmZpZ3VyYXRpb248YnI+CiZndDvCoCDCoCDCoCDCoCDCoGNhX2VuYWJsZV9sZGFw X3Byb2ZpbGVfc3Vic3lzPHdicj50ZW0oY2EpPGJyPgomZ3Q7wqAgwqAgwqAgwqBGaWxlPGJyPgom Z3Q7wqAgwqAgwqAmcXVvdDsvdXNyL2xpYi9weXRob24yLjcvZGlzdC1wYWNrPHdicj5hZ2VzL2lw YXNlcnZlci9pbnN0YWxsL3NlcnZlci88d2JyPnVwZ3JhZGUucHkmcXVvdDssPGJyPgomZ3Q7wqAg wqAgwqBsaW5lIDM0NywgaW4gY2FfZW5hYmxlX2xkYXBfcHJvZmlsZV9zdWJzeXN0PHdicj5lbTxi cj4KJmd0O8KgIMKgIMKgIMKgIMKgY2FpbnN0YW5jZS5taWdyYXRlX3Byb2ZpbGVzX3Q8d2JyPm9f bGRhcCgpPGJyPgomZ3Q7wqAgwqAgwqAgwqBGaWxlPGJyPgomZ3Q7wqAgwqAgwqAmcXVvdDsvdXNy L2xpYi9weXRob24yLjcvZGlzdC1wYWNrPHdicj5hZ2VzL2lwYXNlcnZlci9pbnN0YWxsL2NhaW5z dGE8d2JyPm5jZS5weSZxdW90Oyw8YnI+CiZndDvCoCDCoCDCoGxpbmUgMTk4MSwgaW4gbWlncmF0 ZV9wcm9maWxlc190b19sZGFwPGJyPgomZ3Q7wqAgwqAgwqAgwqAgwqBfY3JlYXRlX2RvZ3RhZ19w cm9maWxlKHByb2ZpbDx3YnI+ZV9pZCwgcHJvZmlsZV9kYXRhLCBvdmVyd3JpdGU9RmFsc2UpPGJy PgomZ3Q7wqAgwqAgwqAgwqBGaWxlPGJyPgomZ3Q7wqAgwqAgwqAmcXVvdDsvdXNyL2xpYi9weXRo b24yLjcvZGlzdC1wYWNrPHdicj5hZ2VzL2lwYXNlcnZlci9pbnN0YWxsL2NhaW5zdGE8d2JyPm5j ZS5weSZxdW90Oyw8YnI+CiZndDvCoCDCoCDCoGxpbmUgMTk4NywgaW4gX2NyZWF0ZV9kb2d0YWdf cHJvZmlsZTxicj4KJmd0O8KgIMKgIMKgIMKgIMKgd2l0aCBhcGkuQmFja2VuZC5yYV9jZXJ0cHJv ZmlsZSBhcyBwcm9maWxlX2FwaTo8YnI+CiZndDvCoCDCoCDCoCDCoEZpbGU8YnI+CiZndDvCoCDC oCDCoCZxdW90Oy91c3IvbGliL3B5dGhvbjIuNy9kaXN0LXBhY2s8d2JyPmFnZXMvaXBhc2VydmVy L3BsdWdpbnMvZG9ndGFnLjx3YnI+cHkmcXVvdDssIGxpbmU8YnI+CiZndDvCoCDCoCDCoDEyOTQs IGluIF9fZW50ZXJfXzxicj4KJmd0O8KgIMKgIMKgIMKgIMKgcmFpc2UgZXJyb3JzLlJlbW90ZVJl dHJpZXZlRXJyb3IocmVhPHdicj5zb249XygmIzM5O0ZhaWxlZCB0bzxicj4KJmd0O8KgIMKgIMKg YXV0aGVudGljYXRlIHRvIENBIFJFU1QgQVBJJiMzOTspKTxicj4KJmd0Ozxicj4KJmd0O8KgIMKg IMKgMjAxNy0xMS0xNVQxMzowNTo1OVogREVCVUcgVGhlIGlwYS1zZXJ2ZXItdXBncmFkZSBjb21t YW5kIGZhaWxlZCw8YnI+CiZndDvCoCDCoCDCoGV4Y2VwdGlvbjogUmVtb3RlUmV0cmlldmVFcnJv cjogRmFpbGVkIHRvIGF1dGhlbnRpY2F0ZSB0byBDQSBSRVNUIEFQSTxicj4KJmd0O8KgIMKgIMKg MjAxNy0xMS0xNVQxMzowNTo1OVogRVJST1IgVW5leHBlY3RlZCBlcnJvciAtIHNlZTxicj4KJmd0 O8KgIMKgIMKgL3Zhci9sb2cvaXBhdXBncmFkZS5sb2cgZm9yIGRldGFpbHM6PGJyPgomZ3Q7wqAg wqAgwqBSZW1vdGVSZXRyaWV2ZUVycm9yOiBGYWlsZWQgdG8gYXV0aGVudGljYXRlIHRvIENBIFJF U1QgQVBJPGJyPgomZ3Q7PGJyPgomZ3Q7PGJyPgomZ3Q7PGJyPgomZ3Q7PGJyPgo8L2Rpdj48ZGl2 IGNsYXNzPSJtXzI0Mjk4OTEwMjU0OTU0NTMwMzltXzYzMzkyOTE5OTAyMjMzMjIyNGVsaWRlZC10 ZXh0Ij4mZ3Q7IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzx3YnI+X19fX19fX19fX19f X19fX188YnI+CiZndDsgRnJlZUlQQS11c2VycyBtYWlsaW5nIGxpc3QgLS0gPGEgaHJlZj0ibWFp bHRvOmZyZWVpcGEtdXNlcnNAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZyIgdGFyZ2V0PSJfYmxhbmsi PmZyZWVpcGEtdXNlcnNAbGlzdHMuZmVkb3JhaG9zdDx3YnI+ZWQub3JnPC9hPjxicj4KJmd0OyBU byB1bnN1YnNjcmliZSBzZW5kIGFuIGVtYWlsIHRvIDxhIGhyZWY9Im1haWx0bzpmcmVlaXBhLXVz ZXJzLWxlYXZlQGxpc3RzLmZlZG9yYWhvc3RlZC5vcmciIHRhcmdldD0iX2JsYW5rIj5mcmVlaXBh LXVzZXJzLWxlYXZlQGxpc3RzLmZlZG88d2JyPnJhaG9zdGVkLm9yZzwvYT48YnI+CiZndDs8YnI+ Cjxicj4KPC9kaXY+PC9ibG9ja3F1b3RlPjwvZGl2Pjxicj48L2Rpdj48L2Rpdj48L2Rpdj48L2Rp dj48L2Rpdj4KPC9ibG9ja3F1b3RlPjwvZGl2Pjxicj48L2Rpdj4KPC9kaXY+PC9kaXY+PC9ibG9j a3F1b3RlPjwvZGl2Pjxicj48L2Rpdj4K --===============2229318225281214543==-- From rcritten at redhat.com Tue Nov 21 13:11:16 2017 Content-Type: multipart/mixed; boundary="===============5239458631816544738==" MIME-Version: 1.0 From: Rob Crittenden To: freeipa-users at lists.fedorahosted.org Subject: [Freeipa-users] Re: upgrade to ubuntu 17.10 fails Date: Tue, 21 Nov 2017 08:10:15 -0500 Message-ID: In-Reply-To: CADq_JGphwrPEaiRV7G+-tGyhzzk1O7MMbTfR6aWsUd2_asEL6g@mail.gmail.com --===============5239458631816544738== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable David Harvey wrote: > Hoi, > = > Anyone out there with experience of whether or not adding a replica of > more recent version (4.4.4 and 389 dir 1.3.7.5-1 up from 4.4.3 with 389 > dir 1.3.5.15-2) would impact the existing servers in terms of schema or > similar? > I'm still trying to find a safe way to upgrade safely without going past > a point of no return... Yes, creating a replica with a newer version can add schema and modify existing LDAP entries (like ACIs). rob > = > Kind regards, > = > David > = > On 17 November 2017 at 15:10, David Harvey > wrote: > = > Hi again, > = > No joy yet with spotting CA anomalies. Any additional tips there Rob? > = > Gentle bump Simon, are you confident that building a new replica > won't fall foul of the below from the upgrade page (the schema part): > = > Words of caution > = > * Note that the server is in a *maintenance mode* during upgrade > and does not respond to requests! > * Schema or Directory Server > database object > changes done during the upgrade are replicated to *all FreeIPA > masters* > = > * > * > Thanks again for the support, > = > David > = > On 15 November 2017 at 16:52, David Harvey > > > wrote: > = > Thanks Rob, Simon, > = > Rob, will check, but thought my cert system was healthy before. > It's relatively new (6months or less), and no sub-ca's > involved.. Any specifics on how to invoke the selftests in some > manner that might provide digestible output? Or could it be my > dirty hack of cloning and isolation and I should do as Simon > suggested :)? > = > Simon. WRT spinning up a replica. I was under the impression > that all running servers had to be of the same version, am I > mistaken with that? = > I had avoided what you were suggesting as I feared the new > server might update the schema on the existing ones! > = > Thanks again, appreciate the steering! > = > = > On 15 Nov 2017 14:34, "Rob Crittenden" > wrote: > = > David Harvey via FreeIPA-users wrote: > > Sorry for the dump size, but not sure if the below from > > /var/log/pki/pki-tomcat/localhost.date.log helps: > = > Looks like the selftests are failing. I'd check that your CA > subsystem > certificates are not expired, etc. > = > rob > = > > > > 15-Nov-2017 12:14:50.557 SEVERE [localhost-startStop-1] > > org.apache.catalina.core.ApplicationContext.log > StandardWrapper.Throwable > > java.lang.NullPointerException > > at > > > com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown(Sel= fTestSubsystem.java:1886) > > at > > > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEng= ine.java:2118) > > at > com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2= 013) > > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > > at > > > com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartSe= rvlet.java:114) > > at javax.servlet.GenericServlet.init(GenericServlet.java:15= 8) > > at > > > org.apache.catalina.core.StandardWrapper.initServlet(Standard= Wrapper.java:1227) > > at > > > org.apache.catalina.core.StandardWrapper.loadServlet(Standard= Wrapper.java:1140) > > at > org.apache.catalina.core.StandardWrapper.load(StandardWrapper= .java:1027) > > at > > > org.apache.catalina.core.StandardContext.loadOnStartup(Standa= rdContext.java:5038) > > at > > > org.apache.catalina.core.StandardContext.startInternal(Standa= rdContext.java:5348) > > at > org.apache.catalina.util.LifecycleBase.start(LifecycleBase.ja= va:145) > > at > > > org.apache.catalina.core.ContainerBase.addChildInternal(Conta= inerBase.java:753) > > at > org.apache.catalina.core.ContainerBase.addChild(ContainerBase= .java:729) > > at > org.apache.catalina.core.StandardHost.addChild(StandardHost.j= ava:717) > > at > > > org.apache.catalina.startup.HostConfig.deployDescriptor(HostC= onfig.java:621) > > at > > > org.apache.catalina.startup.HostConfig$DeployDescriptor.run(H= ostConfig.java:1835) > > at > java.util.concurrent.Executors$RunnableAdapter.call(Executors= .java:511) > > at java.util.concurrent.FutureTask.run(FutureTask.java:266) > > at > > > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolE= xecutor.java:1149) > > at > > > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPool= Executor.java:624) > > at java.lang.Thread.run(Thread.java:748) > > > > 15-Nov-2017 12:14:50.558 SEVERE [localhost-startStop-1] > > org.apache.catalina.core.StandardContext.loadOnStartup > Servlet [castart] > > in web application [/ca] threw load() exception > > java.lang.NullPointerException > > at > > > com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown(Sel= fTestSubsystem.java:1886) > > at > > > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEng= ine.java:2118) > > at > com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2= 013) > > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > > at > > > com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartSe= rvlet.java:114) > > at javax.servlet.GenericServlet.init(GenericServlet.java:15= 8) > > at > > > org.apache.catalina.core.StandardWrapper.initServlet(Standard= Wrapper.java:1227) > > at > > > org.apache.catalina.core.StandardWrapper.loadServlet(Standard= Wrapper.java:1140) > > at > org.apache.catalina.core.StandardWrapper.load(StandardWrapper= .java:1027) > > at > > > org.apache.catalina.core.StandardContext.loadOnStartup(Standa= rdContext.java:5038) > > at > > > org.apache.catalina.core.StandardContext.startInternal(Standa= rdContext.java:5348) > > at > org.apache.catalina.util.LifecycleBase.start(LifecycleBase.ja= va:145) > > at > > > org.apache.catalina.core.ContainerBase.addChildInternal(Conta= inerBase.java:753) > > at > org.apache.catalina.core.ContainerBase.addChild(ContainerBase= .java:729) > > at > org.apache.catalina.core.StandardHost.addChild(StandardHost.j= ava:717) > > at > > > org.apache.catalina.startup.HostConfig.deployDescriptor(HostC= onfig.java:621) > > at > > > org.apache.catalina.startup.HostConfig$DeployDescriptor.run(H= ostConfig.java:1835) > > at > java.util.concurrent.Executors$RunnableAdapter.call(Executors= .java:511) > > at java.util.concurrent.FutureTask.run(FutureTask.java:266) > > at > > > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolE= xecutor.java:1149) > > at > > > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPool= Executor.java:624) > > at java.lang.Thread.run(Thread.java:748) > > > > 15-Nov-2017 12:14:54.509 SEVERE [http-bio-8443-exec-1] > > org.apache.catalina.core.StandardHostValve.invoke > Exception Processing > > /ca/rest/account/login > > javax.ws.rs > .ServiceUnavailableException: Subsystem > unavailable > > at > > > com.netscape.cms.tomcat.ProxyRealm.findSecurityConstraints(Pr= oxyRealm.java:138) > > at > > > org.apache.catalina.authenticator.AuthenticatorBase.invoke(Au= thenticatorBase.java:498) > > at > > > org.apache.catalina.core.StandardHostValve.invoke(StandardHos= tValve.java:141) > > at > > > org.apache.catalina.valves.ErrorReportValve.invoke(ErrorRepor= tValve.java:79) > > at > > > org.apache.catalina.valves.AbstractAccessLogValve.invoke(Abst= ractAccessLogValve.java:620) > > at > > > org.apache.catalina.core.StandardEngineValve.invoke(StandardE= ngineValve.java:88) > > at > > > org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAda= pter.java:502) > > at > > > org.apache.coyote.http11.AbstractHttp11Processor.process(Abst= ractHttp11Processor.java:1132) > > at > > > org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.= process(AbstractProtocol.java:684) > > at > > org.apache.tomcat.util.net > .JIoEndpoint$SocketProcess= or.run(JIoEndpoint.java:283) > > at > > > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolE= xecutor.java:1149) > > at > > > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPool= Executor.java:624) > > at > > > org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.ru= n(TaskThread.java:61) > > at java.lang.Thread.run(Thread.java:748) > > > > 15-Nov-2017 13:05:55.874 SEVERE [localhost-startStop-1] > > org.apache.catalina.core.ApplicationContext.log > StandardWrapper.Throwable > > java.lang.NullPointerException > > at > > > com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown(Sel= fTestSubsystem.java:1886) > > at > > > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEng= ine.java:2118) > > at > com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2= 013) > > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > > at > > > com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartSe= rvlet.java:114) > > at javax.servlet.GenericServlet.init(GenericServlet.java:15= 8) > > at > > > org.apache.catalina.core.StandardWrapper.initServlet(Standard= Wrapper.java:1227) > > at > > > org.apache.catalina.core.StandardWrapper.loadServlet(Standard= Wrapper.java:1140) > > at > org.apache.catalina.core.StandardWrapper.load(StandardWrapper= .java:1027) > > at > > > org.apache.catalina.core.StandardContext.loadOnStartup(Standa= rdContext.java:5038) > > at > > > org.apache.catalina.core.StandardContext.startInternal(Standa= rdContext.java:5348) > > at > org.apache.catalina.util.LifecycleBase.start(LifecycleBase.ja= va:145) > > at > > > org.apache.catalina.core.ContainerBase.addChildInternal(Conta= inerBase.java:753) > > at > org.apache.catalina.core.ContainerBase.addChild(ContainerBase= .java:729) > > at > org.apache.catalina.core.StandardHost.addChild(StandardHost.j= ava:717) > > at > > > org.apache.catalina.startup.HostConfig.deployDescriptor(HostC= onfig.java:621) > > at > > > org.apache.catalina.startup.HostConfig$DeployDescriptor.run(H= ostConfig.java:1835) > > at > java.util.concurrent.Executors$RunnableAdapter.call(Executors= .java:511) > > at java.util.concurrent.FutureTask.run(FutureTask.java:266) > > at > > > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolE= xecutor.java:1149) > > at > > > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPool= Executor.java:624) > > at java.lang.Thread.run(Thread.java:748) > > > > 15-Nov-2017 13:05:55.875 SEVERE [localhost-startStop-1] > > org.apache.catalina.core.StandardContext.loadOnStartup > Servlet [castart] > > in web application [/ca] threw load() exception > > java.lang.NullPointerException > > at > > > com.netscape.cmscore.selftests.SelfTestSubsystem.shutdown(Sel= fTestSubsystem.java:1886) > > at > > > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems(CMSEng= ine.java:2118) > > at > com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine.java:2= 013) > > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > > at > > > com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartSe= rvlet.java:114) > > at javax.servlet.GenericServlet.init(GenericServlet.java:15= 8) > > at > > > org.apache.catalina.core.StandardWrapper.initServlet(Standard= Wrapper.java:1227) > > at > > > org.apache.catalina.core.StandardWrapper.loadServlet(Standard= Wrapper.java:1140) > > at > org.apache.catalina.core.StandardWrapper.load(StandardWrapper= .java:1027) > > at > > > org.apache.catalina.core.StandardContext.loadOnStartup(Standa= rdContext.java:5038) > > at > > > org.apache.catalina.core.StandardContext.startInternal(Standa= rdContext.java:5348) > > at > org.apache.catalina.util.LifecycleBase.start(LifecycleBase.ja= va:145) > > at > > > org.apache.catalina.core.ContainerBase.addChildInternal(Conta= inerBase.java:753) > > at > org.apache.catalina.core.ContainerBase.addChild(ContainerBase= .java:729) > > at > org.apache.catalina.core.StandardHost.addChild(StandardHost.j= ava:717) > > at > > > org.apache.catalina.startup.HostConfig.deployDescriptor(HostC= onfig.java:621) > > at > > > org.apache.catalina.startup.HostConfig$DeployDescriptor.run(H= ostConfig.java:1835) > > at > java.util.concurrent.Executors$RunnableAdapter.call(Executors= .java:511) > > at java.util.concurrent.FutureTask.run(FutureTask.java:266) > > at > > > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolE= xecutor.java:1149) > > at > > > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPool= Executor.java:624) > > at java.lang.Thread.run(Thread.java:748) > > > > 15-Nov-2017 13:05:59.706 SEVERE [http-bio-8443-exec-1] > > org.apache.catalina.core.StandardHostValve.invoke > Exception Processing > > /ca/rest/account/login > > javax.ws.rs > .ServiceUnavailableException: Subsystem > unavailable > > at > > > com.netscape.cms.tomcat.ProxyRealm.findSecurityConstraints(Pr= oxyRealm.java:138) > > at > > > org.apache.catalina.authenticator.AuthenticatorBase.invoke(Au= thenticatorBase.java:498) > > at > > > org.apache.catalina.core.StandardHostValve.invoke(StandardHos= tValve.java:141) > > at > > > org.apache.catalina.valves.ErrorReportValve.invoke(ErrorRepor= tValve.java:79) > > at > > > org.apache.catalina.valves.AbstractAccessLogValve.invoke(Abst= ractAccessLogValve.java:620) > > at > > > org.apache.catalina.core.StandardEngineValve.invoke(StandardE= ngineValve.java:88) > > at > > > org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAda= pter.java:502) > > at > > > org.apache.coyote.http11.AbstractHttp11Processor.process(Abst= ractHttp11Processor.java:1132) > > at > > > org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.= process(AbstractProtocol.java:684) > > at > > org.apache.tomcat.util.net > .JIoEndpoint$SocketProcess= or.run(JIoEndpoint.java:283) > > at > > > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolE= xecutor.java:1149) > > at > > > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPool= Executor.java:624) > > at > > > org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.ru= n(TaskThread.java:61) > > at java.lang.Thread.run(Thread.java:748) > > > > > > On 15 November 2017 at 13:23, David Harvey > > > >> wrote: > > > > Hi wisdom of the list, > > > > I know I am an edge case with running on ubuntu, but > hoped someone > > might be able to shed some light. > > > > A bit of background. I'm trying to test upgrades witho= ut > > potentially hosing my existing services, so I have > cloned the VM, > > given it a new IP address, updated hosts file and > pointed DNS > > somewhere that doesn't know about the real IPA > services (8.8.8.8) so > > it won't try and sync or replicate. > > > > Attempting to upgrade hits a snags or two, some > described in bugs > > already like the pki version number confusing the apt > > scripts > https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1703051 > > > = > > > ). > > The one I can't work around however is below. > > > > It seems deeply unhappy, and restarting the services > result in the > > dogtag-pki web page being available until a login > attempt is made > > (as occurs during the ipa-server-upgrade) after which > point it bombs > > with a 500 error. > > > > Could the below caused > > by > https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1716842 > > > = > > > ? > > > > Any advice appreciated, as I think even when 18.04 > hits with the > > proposed updates to rely on to tomcat 8.5, I'll still > need to > > upgrade via 17.10 which seems currently fraught! If > it relates to > > my method of cloning the VM, is there a better way of > testing > > upgrades without potentially hosing the existing live > systems? > > > > > > Thanks in advance, > > > > David > > > > 2017-11-15T13:05:59Z DEBUG approved_usage =3D SSL Server > > intended_usage =3D SSL Server > > 2017-11-15T13:05:59Z DEBUG cert valid True for > "CN=3Dipa1.my.net > > ,O=3DTHOMAC.NET > " > > 2017-11-15T13:05:59Z DEBUG handshake complete, peer =3D > IPADDRESS > > 2017-11-15T13:05:59Z DEBUG Protocol: TLS1.2 > > 2017-11-15T13:05:59Z DEBUG Cipher: > TLS_RSA_WITH_AES_128_CBC_SHA > > 2017-11-15T13:05:59Z DEBUG response status 500 > > 2017-11-15T13:05:59Z DEBUG response headers > {'content-length': > > '2292', 'content-language': 'en', 'server': > 'Apache-Coyote/1.1', > > 'connection': 'close', 'date': 'Wed, 15 Nov 2017 > 13:05:59 GMT', > > 'content-type': 'text/html;charset=3Dutf-8'} > > 2017-11-15T13:05:59Z DEBUG response body ' > html>Apache Tomcat/8.0.46 (Ubuntu) > - Error > > report > >

HTTP Status 500 - Subsystem > unavailable

> class=3D"line">

type Exception > > report

message Subsystem > > unavailable

description The server > encountered > > an internal error that prevented it from fulfilling this > > = > request.

exception

javax.ws.rs
>             
>             >     .ServiceUnavailableException: Subsystem
>             >   =

>              unavailable\n\tcom.netscape.cms.tomcat.ProxyRealm.findSecuri=
tyConstraints(ProxyRealm.java:138)\n\torg.apache.catalina.authenticator.Aut=
henticatorBase.invoke(AuthenticatorBase.java:498)\n\torg.apache.catalina.va=
lves.ErrorReportValve.invoke(ErrorReportValve.java:79)\n\torg.apache.catali=
na.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:620)\n\=
torg.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:502=
)\n\torg.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp1=
1Processor.java:1132)\n\torg.apache.coyote.AbstractProtocol$AbstractConnect=
ionHandler.process(AbstractProtocol.java:684)\n\torg.apache.tomcat.util.net
>             .JIoEndpoint$SocketProces=
sor.run(JIoEndpoint.java:283)\n\tjava.util.concurrent.ThreadPoolExecutor.ru=
nWorker(ThreadPoolExecutor.java:1149)\n\tjava.util.concurrent.ThreadPoolExe=
cutor$Worker.run(ThreadPoolExecutor.java:624)\n\torg.apache.tomcat.util.thr=
eads.TaskThread$WrappingRunnable.run(TaskThread.java:61)\n\tjava.lang.Threa=
d.run(Thread.java:748)\n

note > > The full stack trace of the root cause is available > in the Apache > > Tomcat/8.0.46 (Ubuntu) logs.

class=3D"line">

Apache > > Tomcat/8.0.46 (Ubuntu)

' > > 2017-11-15T13:05:59Z ERROR IPA server upgrade failed: > Inspect > > /var/log/ipaupgrade.log and run command > ipa-server-upgrade manually. > > 2017-11-15T13:05:59Z DEBUG File > > = > "/usr/lib/python2.7/dist-packages/ipapython/admintool.py", > line 172, > > in execute > > return_value =3D self.run() > > File > > = > "/usr/lib/python2.7/dist-packages/ipaserver/install/ipa_serv= er_upgrade.py", > > line 46, in run > > server.upgrade() > > File > > = > "/usr/lib/python2.7/dist-packages/ipaserver/install/server/u= pgrade.py", > > line 1878, in upgrade > > upgrade_configuration() > > File > > = > "/usr/lib/python2.7/dist-packages/ipaserver/install/server/u= pgrade.py", > > line 1797, in upgrade_configuration > > ca_enable_ldap_profile_subsystem(ca) > > File > > = > "/usr/lib/python2.7/dist-packages/ipaserver/install/server/u= pgrade.py", > > line 347, in ca_enable_ldap_profile_subsystem > > cainstance.migrate_profiles_to_ldap() > > File > > = > "/usr/lib/python2.7/dist-packages/ipaserver/install/cainstan= ce.py", > > line 1981, in migrate_profiles_to_ldap > > _create_dogtag_profile(profile_id, profile_data, > overwrite=3DFalse) > > File > > = > "/usr/lib/python2.7/dist-packages/ipaserver/install/cainstan= ce.py", > > line 1987, in _create_dogtag_profile > > with api.Backend.ra_certprofile as profile_api: > > File > > = > "/usr/lib/python2.7/dist-packages/ipaserver/plugins/dogtag.p= y", > line > > 1294, in __enter__ > > raise errors.RemoteRetrieveError(reason=3D_('Failed= to > > authenticate to CA REST API')) > > > > 2017-11-15T13:05:59Z DEBUG The ipa-server-upgrade > command failed, > > exception: RemoteRetrieveError: Failed to authenticate > to CA REST API > > 2017-11-15T13:05:59Z ERROR Unexpected error - see > > /var/log/ipaupgrade.log for details: > > RemoteRetrieveError: Failed to authenticate to CA REST = API > > > > > > > > > > _______________________________________________ > > FreeIPA-users mailing list -- > freeipa-users(a)lists.fedorahosted.org > > > To unsubscribe send an email to > freeipa-users-leave(a)lists.fedorahosted.org > > > > = > = > = >=20 --===============5239458631816544738==-- From davidcharvey at googlemail.com Wed Nov 22 18:35:21 2017 Content-Type: multipart/mixed; boundary="===============5475665980130775077==" MIME-Version: 1.0 From: David Harvey To: freeipa-users at lists.fedorahosted.org Subject: [Freeipa-users] Re: upgrade to ubuntu 17.10 fails Date: Wed, 22 Nov 2017 18:34:32 +0000 Message-ID: In-Reply-To: ab450e43-07bc-f087-1e9d-687117f668af@redhat.com --===============5475665980130775077== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable For anyone interested, I think I have it working properly after the following: Edit /etc/pki/pki.version to remove +12 (confused the postinstall script). Ensure you have kinit admin from the root session you're using to upgrade. If like me you find the rest API on 8443 dies when being hit and gives a 501 or internal server error (in the IPA server install log) Install libtomcat8.0-java (which removes libtomcat8-java). Then the really weird bit. Kill the process you find with (ps aux | grep tomcat). Launch it again using the full command line ps aux gave you. Then running ipa-server-upgrade continues.. Not sure why tomcat is more resilient when launched as root, but the pki seems to work ok at issuing certs after the above and a reboot for good measure. Hope this is of some help to someone! Typed with thumbs so excuse typos and memory fails. David On 21 Nov 2017 13:10, "Rob Crittenden" wrote: > David Harvey wrote: > > Hoi, > > > > Anyone out there with experience of whether or not adding a replica of > > more recent version (4.4.4 and 389 dir 1.3.7.5-1 up from 4.4.3 with 389 > > dir 1.3.5.15-2) would impact the existing servers in terms of schema or > > similar? > > I'm still trying to find a safe way to upgrade safely without going past > > a point of no return... > > Yes, creating a replica with a newer version can add schema and modify > existing LDAP entries (like ACIs). > > rob > > > > > Kind regards, > > > > David > > > > On 17 November 2017 at 15:10, David Harvey > > wrote: > > > > Hi again, > > > > No joy yet with spotting CA anomalies. Any additional tips there Ro= b? > > > > Gentle bump Simon, are you confident that building a new replica > > won't fall foul of the below from the upgrade page (the schema part= ): > > > > Words of caution > > > > * Note that the server is in a *maintenance mode* during upgrade > > and does not respond to requests! > > * Schema or Directory Server > > database object > > changes done during the upgrade are replicated to *all FreeIPA > > masters* > > > > * > > * > > Thanks again for the support, > > > > David > > > > On 15 November 2017 at 16:52, David Harvey > > > > > wrote: > > > > Thanks Rob, Simon, > > > > Rob, will check, but thought my cert system was healthy before. > > It's relatively new (6months or less), and no sub-ca's > > involved.. Any specifics on how to invoke the selftests in some > > manner that might provide digestible output? Or could it be my > > dirty hack of cloning and isolation and I should do as Simon > > suggested :)? > > > > Simon. WRT spinning up a replica. I was under the impression > > that all running servers had to be of the same version, am I > > mistaken with that? > > I had avoided what you were suggesting as I feared the new > > server might update the schema on the existing ones! > > > > Thanks again, appreciate the steering! > > > > > > On 15 Nov 2017 14:34, "Rob Crittenden" > > wrote: > > > > David Harvey via FreeIPA-users wrote: > > > Sorry for the dump size, but not sure if the below from > > > /var/log/pki/pki-tomcat/localhost.date.log helps: > > > > Looks like the selftests are failing. I'd check that your CA > > subsystem > > certificates are not expired, etc. > > > > rob > > > > > > > > 15-Nov-2017 12:14:50.557 SEVERE [localhost-startStop-1] > > > org.apache.catalina.core.ApplicationContext.log > > StandardWrapper.Throwable > > > java.lang.NullPointerException > > > at > > > > > com.netscape.cmscore.selftests.SelfTestSubsystem. > shutdown(SelfTestSubsystem.java:1886) > > > at > > > > > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems( > CMSEngine.java:2118) > > > at > > com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine. > java:2013) > > > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > > > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > > > at > > > > > com.netscape.cms.servlet.base.CMSStartServlet.init( > CMSStartServlet.java:114) > > > at javax.servlet.GenericServlet. > init(GenericServlet.java:158) > > > at > > > > > org.apache.catalina.core.StandardWrapper.initServlet( > StandardWrapper.java:1227) > > > at > > > > > org.apache.catalina.core.StandardWrapper.loadServlet( > StandardWrapper.java:1140) > > > at > > org.apache.catalina.core.StandardWrapper.load( > StandardWrapper.java:1027) > > > at > > > > > org.apache.catalina.core.StandardContext.loadOnStartup( > StandardContext.java:5038) > > > at > > > > > org.apache.catalina.core.StandardContext.startInternal( > StandardContext.java:5348) > > > at > > org.apache.catalina.util.LifecycleBase.start( > LifecycleBase.java:145) > > > at > > > > > org.apache.catalina.core.ContainerBase.addChildInternal( > ContainerBase.java:753) > > > at > > org.apache.catalina.core.ContainerBase.addChild( > ContainerBase.java:729) > > > at > > org.apache.catalina.core.StandardHost.addChild( > StandardHost.java:717) > > > at > > > > > org.apache.catalina.startup.HostConfig.deployDescriptor( > HostConfig.java:621) > > > at > > > > > org.apache.catalina.startup.HostConfig$DeployDescriptor. > run(HostConfig.java:1835) > > > at > > java.util.concurrent.Executors$RunnableAdapter. > call(Executors.java:511) > > > at java.util.concurrent.FutureTask.run(FutureTask. > java:266) > > > at > > > > > java.util.concurrent.ThreadPoolExecutor.runWorker( > ThreadPoolExecutor.java:1149) > > > at > > > > > java.util.concurrent.ThreadPoolExecutor$Worker.run( > ThreadPoolExecutor.java:624) > > > at java.lang.Thread.run(Thread.java:748) > > > > > > 15-Nov-2017 12:14:50.558 SEVERE [localhost-startStop-1] > > > org.apache.catalina.core.StandardContext.loadOnStartup > > Servlet [castart] > > > in web application [/ca] threw load() exception > > > java.lang.NullPointerException > > > at > > > > > com.netscape.cmscore.selftests.SelfTestSubsystem. > shutdown(SelfTestSubsystem.java:1886) > > > at > > > > > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems( > CMSEngine.java:2118) > > > at > > com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine. > java:2013) > > > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > > > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > > > at > > > > > com.netscape.cms.servlet.base.CMSStartServlet.init( > CMSStartServlet.java:114) > > > at javax.servlet.GenericServlet. > init(GenericServlet.java:158) > > > at > > > > > org.apache.catalina.core.StandardWrapper.initServlet( > StandardWrapper.java:1227) > > > at > > > > > org.apache.catalina.core.StandardWrapper.loadServlet( > StandardWrapper.java:1140) > > > at > > org.apache.catalina.core.StandardWrapper.load( > StandardWrapper.java:1027) > > > at > > > > > org.apache.catalina.core.StandardContext.loadOnStartup( > StandardContext.java:5038) > > > at > > > > > org.apache.catalina.core.StandardContext.startInternal( > StandardContext.java:5348) > > > at > > org.apache.catalina.util.LifecycleBase.start( > LifecycleBase.java:145) > > > at > > > > > org.apache.catalina.core.ContainerBase.addChildInternal( > ContainerBase.java:753) > > > at > > org.apache.catalina.core.ContainerBase.addChild( > ContainerBase.java:729) > > > at > > org.apache.catalina.core.StandardHost.addChild( > StandardHost.java:717) > > > at > > > > > org.apache.catalina.startup.HostConfig.deployDescriptor( > HostConfig.java:621) > > > at > > > > > org.apache.catalina.startup.HostConfig$DeployDescriptor. > run(HostConfig.java:1835) > > > at > > java.util.concurrent.Executors$RunnableAdapter. > call(Executors.java:511) > > > at java.util.concurrent.FutureTask.run(FutureTask. > java:266) > > > at > > > > > java.util.concurrent.ThreadPoolExecutor.runWorker( > ThreadPoolExecutor.java:1149) > > > at > > > > > java.util.concurrent.ThreadPoolExecutor$Worker.run( > ThreadPoolExecutor.java:624) > > > at java.lang.Thread.run(Thread.java:748) > > > > > > 15-Nov-2017 12:14:54.509 SEVERE [http-bio-8443-exec-1] > > > org.apache.catalina.core.StandardHostValve.invoke > > Exception Processing > > > /ca/rest/account/login > > > javax.ws.rs > > .ServiceUnavailableException: Subsystem > > unavailable > > > at > > > > > com.netscape.cms.tomcat.ProxyRealm.findSecurityConstraints( > ProxyRealm.java:138) > > > at > > > > > org.apache.catalina.authenticator.AuthenticatorBase.invoke( > AuthenticatorBase.java:498) > > > at > > > > > org.apache.catalina.core.StandardHostValve.invoke( > StandardHostValve.java:141) > > > at > > > > > org.apache.catalina.valves.ErrorReportValve.invoke( > ErrorReportValve.java:79) > > > at > > > > > org.apache.catalina.valves.AbstractAccessLogValve.invoke( > AbstractAccessLogValve.java:620) > > > at > > > > > org.apache.catalina.core.StandardEngineValve.invoke( > StandardEngineValve.java:88) > > > at > > > > > org.apache.catalina.connector.CoyoteAdapter.service( > CoyoteAdapter.java:502) > > > at > > > > > org.apache.coyote.http11.AbstractHttp11Processor.process( > AbstractHttp11Processor.java:1132) > > > at > > > > > org.apache.coyote.AbstractProtocol$ > AbstractConnectionHandler.process(AbstractProtocol.java:684) > > > at > > > org.apache.tomcat.util.net > > .JIoEndpoint$ > SocketProcessor.run(JIoEndpoint.java:283) > > > at > > > > > java.util.concurrent.ThreadPoolExecutor.runWorker( > ThreadPoolExecutor.java:1149) > > > at > > > > > java.util.concurrent.ThreadPoolExecutor$Worker.run( > ThreadPoolExecutor.java:624) > > > at > > > > > org.apache.tomcat.util.threads.TaskThread$ > WrappingRunnable.run(TaskThread.java:61) > > > at java.lang.Thread.run(Thread.java:748) > > > > > > 15-Nov-2017 13:05:55.874 SEVERE [localhost-startStop-1] > > > org.apache.catalina.core.ApplicationContext.log > > StandardWrapper.Throwable > > > java.lang.NullPointerException > > > at > > > > > com.netscape.cmscore.selftests.SelfTestSubsystem. > shutdown(SelfTestSubsystem.java:1886) > > > at > > > > > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems( > CMSEngine.java:2118) > > > at > > com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine. > java:2013) > > > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > > > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > > > at > > > > > com.netscape.cms.servlet.base.CMSStartServlet.init( > CMSStartServlet.java:114) > > > at javax.servlet.GenericServlet. > init(GenericServlet.java:158) > > > at > > > > > org.apache.catalina.core.StandardWrapper.initServlet( > StandardWrapper.java:1227) > > > at > > > > > org.apache.catalina.core.StandardWrapper.loadServlet( > StandardWrapper.java:1140) > > > at > > org.apache.catalina.core.StandardWrapper.load( > StandardWrapper.java:1027) > > > at > > > > > org.apache.catalina.core.StandardContext.loadOnStartup( > StandardContext.java:5038) > > > at > > > > > org.apache.catalina.core.StandardContext.startInternal( > StandardContext.java:5348) > > > at > > org.apache.catalina.util.LifecycleBase.start( > LifecycleBase.java:145) > > > at > > > > > org.apache.catalina.core.ContainerBase.addChildInternal( > ContainerBase.java:753) > > > at > > org.apache.catalina.core.ContainerBase.addChild( > ContainerBase.java:729) > > > at > > org.apache.catalina.core.StandardHost.addChild( > StandardHost.java:717) > > > at > > > > > org.apache.catalina.startup.HostConfig.deployDescriptor( > HostConfig.java:621) > > > at > > > > > org.apache.catalina.startup.HostConfig$DeployDescriptor. > run(HostConfig.java:1835) > > > at > > java.util.concurrent.Executors$RunnableAdapter. > call(Executors.java:511) > > > at java.util.concurrent.FutureTask.run(FutureTask. > java:266) > > > at > > > > > java.util.concurrent.ThreadPoolExecutor.runWorker( > ThreadPoolExecutor.java:1149) > > > at > > > > > java.util.concurrent.ThreadPoolExecutor$Worker.run( > ThreadPoolExecutor.java:624) > > > at java.lang.Thread.run(Thread.java:748) > > > > > > 15-Nov-2017 13:05:55.875 SEVERE [localhost-startStop-1] > > > org.apache.catalina.core.StandardContext.loadOnStartup > > Servlet [castart] > > > in web application [/ca] threw load() exception > > > java.lang.NullPointerException > > > at > > > > > com.netscape.cmscore.selftests.SelfTestSubsystem. > shutdown(SelfTestSubsystem.java:1886) > > > at > > > > > com.netscape.cmscore.apps.CMSEngine.shutdownSubsystems( > CMSEngine.java:2118) > > > at > > com.netscape.cmscore.apps.CMSEngine.shutdown(CMSEngine. > java:2013) > > > at com.netscape.certsrv.apps.CMS.shutdown(CMS.java:234) > > > at com.netscape.certsrv.apps.CMS.start(CMS.java:1630) > > > at > > > > > com.netscape.cms.servlet.base.CMSStartServlet.init( > CMSStartServlet.java:114) > > > at javax.servlet.GenericServlet. > init(GenericServlet.java:158) > > > at > > > > > org.apache.catalina.core.StandardWrapper.initServlet( > StandardWrapper.java:1227) > > > at > > > > > org.apache.catalina.core.StandardWrapper.loadServlet( > StandardWrapper.java:1140) > > > at > > org.apache.catalina.core.StandardWrapper.load( > StandardWrapper.java:1027) > > > at > > > > > org.apache.catalina.core.StandardContext.loadOnStartup( > StandardContext.java:5038) > > > at > > > > > org.apache.catalina.core.StandardContext.startInternal( > StandardContext.java:5348) > > > at > > org.apache.catalina.util.LifecycleBase.start( > LifecycleBase.java:145) > > > at > > > > > org.apache.catalina.core.ContainerBase.addChildInternal( > ContainerBase.java:753) > > > at > > org.apache.catalina.core.ContainerBase.addChild( > ContainerBase.java:729) > > > at > > org.apache.catalina.core.StandardHost.addChild( > StandardHost.java:717) > > > at > > > > > org.apache.catalina.startup.HostConfig.deployDescriptor( > HostConfig.java:621) > > > at > > > > > org.apache.catalina.startup.HostConfig$DeployDescriptor. > run(HostConfig.java:1835) > > > at > > java.util.concurrent.Executors$RunnableAdapter. > call(Executors.java:511) > > > at java.util.concurrent.FutureTask.run(FutureTask. > java:266) > > > at > > > > > java.util.concurrent.ThreadPoolExecutor.runWorker( > ThreadPoolExecutor.java:1149) > > > at > > > > > java.util.concurrent.ThreadPoolExecutor$Worker.run( > ThreadPoolExecutor.java:624) > > > at java.lang.Thread.run(Thread.java:748) > > > > > > 15-Nov-2017 13:05:59.706 SEVERE [http-bio-8443-exec-1] > > > org.apache.catalina.core.StandardHostValve.invoke > > Exception Processing > > > /ca/rest/account/login > > > javax.ws.rs > > .ServiceUnavailableException: Subsystem > > unavailable > > > at > > > > > com.netscape.cms.tomcat.ProxyRealm.findSecurityConstraints( > ProxyRealm.java:138) > > > at > > > > > org.apache.catalina.authenticator.AuthenticatorBase.invoke( > AuthenticatorBase.java:498) > > > at > > > > > org.apache.catalina.core.StandardHostValve.invoke( > StandardHostValve.java:141) > > > at > > > > > org.apache.catalina.valves.ErrorReportValve.invoke( > ErrorReportValve.java:79) > > > at > > > > > org.apache.catalina.valves.AbstractAccessLogValve.invoke( > AbstractAccessLogValve.java:620) > > > at > > > > > org.apache.catalina.core.StandardEngineValve.invoke( > StandardEngineValve.java:88) > > > at > > > > > org.apache.catalina.connector.CoyoteAdapter.service( > CoyoteAdapter.java:502) > > > at > > > > > org.apache.coyote.http11.AbstractHttp11Processor.process( > AbstractHttp11Processor.java:1132) > > > at > > > > > org.apache.coyote.AbstractProtocol$ > AbstractConnectionHandler.process(AbstractProtocol.java:684) > > > at > > > org.apache.tomcat.util.net > > .JIoEndpoint$ > SocketProcessor.run(JIoEndpoint.java:283) > > > at > > > > > java.util.concurrent.ThreadPoolExecutor.runWorker( > ThreadPoolExecutor.java:1149) > > > at > > > > > java.util.concurrent.ThreadPoolExecutor$Worker.run( > ThreadPoolExecutor.java:624) > > > at > > > > > org.apache.tomcat.util.threads.TaskThread$ > WrappingRunnable.run(TaskThread.java:61) > > > at java.lang.Thread.run(Thread.java:748) > > > > > > > > > On 15 November 2017 at 13:23, David Harvey > > > > > > > >> wrote: > > > > > > Hi wisdom of the list, > > > > > > I know I am an edge case with running on ubuntu, but > > hoped someone > > > might be able to shed some light. > > > > > > A bit of background. I'm trying to test upgrades > without > > > potentially hosing my existing services, so I have > > cloned the VM, > > > given it a new IP address, updated hosts file and > > pointed DNS > > > somewhere that doesn't know about the real IPA > > services (8.8.8.8) so > > > it won't try and sync or replicate. > > > > > > Attempting to upgrade hits a snags or two, some > > described in bugs > > > already like the pki version number confusing the apt > > > scripts > > https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/ > 1703051 > > 1703051> > > > > > 1703051 > > 1703051>> > > ). > > > The one I can't work around however is below. > > > > > > It seems deeply unhappy, and restarting the services > > result in the > > > dogtag-pki web page being available until a login > > attempt is made > > > (as occurs during the ipa-server-upgrade) after which > > point it bombs > > > with a 500 error. > > > > > > Could the below caused > > > by > > https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/ > 1716842 > > 1716842> > > > > > 1716842 > > 1716842>> > > ? > > > > > > Any advice appreciated, as I think even when 18.04 > > hits with the > > > proposed updates to rely on to tomcat 8.5, I'll still > > need to > > > upgrade via 17.10 which seems currently fraught! If > > it relates to > > > my method of cloning the VM, is there a better way of > > testing > > > upgrades without potentially hosing the existing live > > systems? > > > > > > > > > Thanks in advance, > > > > > > David > > > > > > 2017-11-15T13:05:59Z DEBUG approved_usage =3D SSL Ser= ver > > > intended_usage =3D SSL Server > > > 2017-11-15T13:05:59Z DEBUG cert valid True for > > "CN=3Dipa1.my.net > > > ,O=3DTHOMAC.NET > > " > > > 2017-11-15T13:05:59Z DEBUG handshake complete, peer = =3D > > IPADDRESS > > > 2017-11-15T13:05:59Z DEBUG Protocol: TLS1.2 > > > 2017-11-15T13:05:59Z DEBUG Cipher: > > TLS_RSA_WITH_AES_128_CBC_SHA > > > 2017-11-15T13:05:59Z DEBUG response status 500 > > > 2017-11-15T13:05:59Z DEBUG response headers > > {'content-length': > > > '2292', 'content-language': 'en', 'server': > > 'Apache-Coyote/1.1', > > > 'connection': 'close', 'date': 'Wed, 15 Nov 2017 > > 13:05:59 GMT', > > > 'content-type': 'text/html;charset=3Dutf-8'} > > > 2017-11-15T13:05:59Z DEBUG response body ' > > html>Apache Tomcat/8.0.46 (Ubuntu) > > - Error > > > report > > >

HTTP Status 500 - Subsystem > > unavailable

> > class=3D"line">

type Exception > > > report

message Subsystem > > > unavailable

description The server > > encountered > > > an internal error that prevented it from fulfilling > this > > > > > request.

exception

javax.ws.rs
> >             
> >             >     .ServiceUnavailableException: Subsystem
> >             >
> >              unavailable\n\tcom.netscape.cms.tomcat.ProxyRealm.
> findSecurityConstraints(ProxyRealm.java:138)\n\torg.
> apache.catalina.authenticator.AuthenticatorBase.invoke(
> AuthenticatorBase.java:498)\n\torg.apache.catalina.valves.
> ErrorReportValve.invoke(ErrorReportValve.java:79)\n\
> torg.apache.catalina.valves.AbstractAccessLogValve.invoke(
> AbstractAccessLogValve.java:620)\n\torg.apache.catalina.
> connector.CoyoteAdapter.service(CoyoteAdapter.java:
> 502)\n\torg.apache.coyote.http11.AbstractHttp11Processor.process(
> AbstractHttp11Processor.java:1132)\n\torg.apache.coyote.AbstractProtocol$
> AbstractConnectionHandler.process(AbstractProtocol.java:684)\n\
> torg.apache.tomcat.util.net
> >             .JIoEndpoint$
> SocketProcessor.run(JIoEndpoint.java:283)\n\tjava.util.concurrent.
> ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)\
> n\tjava.util.concurrent.ThreadPoolExecutor$Worker.run(
> ThreadPoolExecutor.java:624)\n\torg.apache.tomcat.util.threads.TaskThread$
> WrappingRunnable.run(TaskThread.java:61)\n\tjava.
> lang.Thread.run(Thread.java:748)\n

note > > > The full stack trace of the root cause is available > > in the Apache > > > Tomcat/8.0.46 (Ubuntu) logs.

> class=3D"line">

Apache > > > Tomcat/8.0.46 (Ubuntu)

' > > > 2017-11-15T13:05:59Z ERROR IPA server upgrade failed: > > Inspect > > > /var/log/ipaupgrade.log and run command > > ipa-server-upgrade manually. > > > 2017-11-15T13:05:59Z DEBUG File > > > > > "/usr/lib/python2.7/dist-packages/ipapython/admintool.py", > > line 172, > > > in execute > > > return_value =3D self.run() > > > File > > > > > "/usr/lib/python2.7/dist-packages/ipaserver/install/ > ipa_server_upgrade.py", > > > line 46, in run > > > server.upgrade() > > > File > > > > > "/usr/lib/python2.7/dist-packages/ipaserver/install/ > server/upgrade.py", > > > line 1878, in upgrade > > > upgrade_configuration() > > > File > > > > > "/usr/lib/python2.7/dist-packages/ipaserver/install/ > server/upgrade.py", > > > line 1797, in upgrade_configuration > > > ca_enable_ldap_profile_subsystem(ca) > > > File > > > > > "/usr/lib/python2.7/dist-packages/ipaserver/install/ > server/upgrade.py", > > > line 347, in ca_enable_ldap_profile_subsystem > > > cainstance.migrate_profiles_to_ldap() > > > File > > > > > "/usr/lib/python2.7/dist-packages/ipaserver/install/ > cainstance.py", > > > line 1981, in migrate_profiles_to_ldap > > > _create_dogtag_profile(profile_id, profile_data, > > overwrite=3DFalse) > > > File > > > > > "/usr/lib/python2.7/dist-packages/ipaserver/install/ > cainstance.py", > > > line 1987, in _create_dogtag_profile > > > with api.Backend.ra_certprofile as profile_api: > > > File > > > > > "/usr/lib/python2.7/dist-packages/ipaserver/plugins/ > dogtag.py", > > line > > > 1294, in __enter__ > > > raise errors.RemoteRetrieveError(reason=3D_('Fail= ed > to > > > authenticate to CA REST API')) > > > > > > 2017-11-15T13:05:59Z DEBUG The ipa-server-upgrade > > command failed, > > > exception: RemoteRetrieveError: Failed to authenticate > > to CA REST API > > > 2017-11-15T13:05:59Z ERROR Unexpected error - see > > > /var/log/ipaupgrade.log for details: > > > RemoteRetrieveError: Failed to authenticate to CA REST > API > > > > > > > > > > > > > > > _______________________________________________ > > > FreeIPA-users mailing list -- > > freeipa-users(a)lists.fedorahosted.org > > > > > To unsubscribe send an email to > > freeipa-users-leave(a)lists.fedorahosted.org > > > > > > > > > > > > > > > --===============5475665980130775077== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGRpdiBkaXI9ImF1dG8iPkZvciBhbnlvbmUgaW50ZXJlc3RlZCwgSSB0aGluayBJIGhhdmUgaXQg d29ya2luZyBwcm9wZXJseSBhZnRlciB0aGUgZm9sbG93aW5nOjxkaXYgZGlyPSJhdXRvIj48YnI+ PC9kaXY+PGRpdiBkaXI9ImF1dG8iPkVkaXQgL2V0Yy9wa2kvcGtpLnZlcnNpb24gdG8gcmVtb3Zl ICsxMiAoY29uZnVzZWQgdGhlIHBvc3RpbnN0YWxsIHNjcmlwdCkuPC9kaXY+PGRpdiBkaXI9ImF1 dG8iPjxicj48L2Rpdj48ZGl2IGRpcj0iYXV0byI+RW5zdXJlIHlvdSBoYXZlIGtpbml0IGFkbWlu IGZyb20gdGhlIHJvb3Qgc2Vzc2lvbiB5b3UmIzM5O3JlIHVzaW5nIHRvIHVwZ3JhZGUuPC9kaXY+ PGRpdiBkaXI9ImF1dG8iPjxicj48L2Rpdj48ZGl2IGRpcj0iYXV0byI+SWYgbGlrZSBtZSB5b3Ug ZmluZCB0aGUgcmVzdCBBUEkgb24gODQ0MyBkaWVzIHdoZW4gYmVpbmcgaGl0IGFuZCBnaXZlcyBh IDUwMSBvciBpbnRlcm5hbCBzZXJ2ZXIgZXJyb3IgKGluIHRoZSBJUEEgc2VydmVyIGluc3RhbGwg bG9nKTwvZGl2PjxkaXYgZGlyPSJhdXRvIj5JbnN0YWxsIGxpYnRvbWNhdDguMC1qYXZhICh3aGlj aCByZW1vdmVzIGxpYnRvbWNhdDgtamF2YSkuPC9kaXY+PGRpdiBkaXI9ImF1dG8iPlRoZW4gdGhl IHJlYWxseSB3ZWlyZCBiaXQuPC9kaXY+PGRpdiBkaXI9ImF1dG8iPktpbGwgdGhlIHByb2Nlc3Mg eW91IGZpbmQgd2l0aCAocHMgYXV4IHwgZ3JlcCB0b21jYXQpLjwvZGl2PjxkaXYgZGlyPSJhdXRv Ij5MYXVuY2ggaXQgYWdhaW4gdXNpbmcgdGhlIGZ1bGwgY29tbWFuZCBsaW5lIHBzIGF1eCBnYXZl IHlvdS48L2Rpdj48ZGl2IGRpcj0iYXV0byI+VGhlbiBydW5uaW5nIGlwYS1zZXJ2ZXItdXBncmFk ZSBjb250aW51ZXMuLjwvZGl2PjxkaXYgZGlyPSJhdXRvIj48YnI+PC9kaXY+PGRpdiBkaXI9ImF1 dG8iPk5vdCBzdXJlIHdoeSB0b21jYXQgaXMgbW9yZSByZXNpbGllbnQgd2hlbiBsYXVuY2hlZCBh cyByb290LCBidXQgdGhlIHBraSBzZWVtcyB0byB3b3JrIG9rIGF0IGlzc3VpbmcgY2VydHMgYWZ0 ZXIgdGhlIGFib3ZlIGFuZCBhIHJlYm9vdCBmb3IgZ29vZCBtZWFzdXJlLjwvZGl2PjxkaXYgZGly PSJhdXRvIj48YnI+PC9kaXY+PGRpdiBkaXI9ImF1dG8iPkhvcGUgdGhpcyBpcyBvZiBzb21lIGhl bHAgdG8gc29tZW9uZSEgVHlwZWQgd2l0aCB0aHVtYnMgc28gZXhjdXNlIHR5cG9zIGFuZCBtZW1v cnkgZmFpbHMuPC9kaXY+PGRpdiBkaXI9ImF1dG8iPjxicj48L2Rpdj48ZGl2IGRpcj0iYXV0byI+ RGF2aWQ8L2Rpdj48ZGl2IGRpcj0iYXV0byI+PGJyPjwvZGl2PjwvZGl2PjxkaXYgY2xhc3M9Imdt YWlsX2V4dHJhIj48YnI+PGRpdiBjbGFzcz0iZ21haWxfcXVvdGUiPk9uIDIxIE5vdiAyMDE3IDEz OjEwLCAmcXVvdDtSb2IgQ3JpdHRlbmRlbiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJjcml0 dGVuQHJlZGhhdC5jb20iPnJjcml0dGVuQHJlZGhhdC5jb208L2E+Jmd0OyB3cm90ZTo8YnIgdHlw ZT0iYXR0cmlidXRpb24iPjxibG9ja3F1b3RlIGNsYXNzPSJnbWFpbF9xdW90ZSIgc3R5bGU9Im1h cmdpbjowIDAgMCAuOGV4O2JvcmRlci1sZWZ0OjFweCAjY2NjIHNvbGlkO3BhZGRpbmctbGVmdDox ZXgiPkRhdmlkIEhhcnZleSB3cm90ZTo8YnI+DQomZ3Q7IEhvaSw8YnI+DQomZ3Q7PGJyPg0KJmd0 OyBBbnlvbmUgb3V0IHRoZXJlIHdpdGggZXhwZXJpZW5jZSBvZiB3aGV0aGVyIG9yIG5vdCBhZGRp bmcgYSByZXBsaWNhIG9mPGJyPg0KJmd0OyBtb3JlIHJlY2VudCB2ZXJzaW9uICg0LjQuNCBhbmQg Mzg5IGRpciAxLjMuNy41LTEgdXAgZnJvbSA0LjQuMyB3aXRoIDM4OTxicj4NCiZndDsgZGlyIDEu My41LjE1LTIpwqAgd291bGQgaW1wYWN0IHRoZSBleGlzdGluZyBzZXJ2ZXJzIGluIHRlcm1zIG9m IHNjaGVtYSBvcjxicj4NCiZndDsgc2ltaWxhcj88YnI+DQomZ3Q7IEkmIzM5O20gc3RpbGwgdHJ5 aW5nIHRvIGZpbmQgYSBzYWZlIHdheSB0byB1cGdyYWRlIHNhZmVseSB3aXRob3V0IGdvaW5nIHBh c3Q8YnI+DQomZ3Q7IGEgcG9pbnQgb2Ygbm8gcmV0dXJuLi4uPGJyPg0KPGJyPg0KWWVzLCBjcmVh dGluZyBhIHJlcGxpY2Egd2l0aCBhIG5ld2VyIHZlcnNpb24gY2FuIGFkZCBzY2hlbWEgYW5kIG1v ZGlmeTxicj4NCmV4aXN0aW5nIExEQVAgZW50cmllcyAobGlrZSBBQ0lzKS48YnI+DQo8YnI+DQpy b2I8YnI+DQo8YnI+DQomZ3Q7PGJyPg0KJmd0OyBLaW5kIHJlZ2FyZHMsPGJyPg0KJmd0Ozxicj4N CiZndDsgRGF2aWQ8YnI+DQomZ3Q7PGJyPg0KJmd0OyBPbiAxNyBOb3ZlbWJlciAyMDE3IGF0IDE1 OjEwLCBEYXZpZCBIYXJ2ZXkgJmx0OzxhIGhyZWY9Im1haWx0bzpkYXZpZGNoYXJ2ZXlAZ29vZ2xl bWFpbC5jb20iPmRhdmlkY2hhcnZleUBnb29nbGVtYWlsLmNvbTwvYT48YnI+DQomZ3Q7ICZsdDtt YWlsdG86PGEgaHJlZj0ibWFpbHRvOmRhdmlkY2hhcnZleUBnb29nbGVtYWlsLmNvbSI+ZGF2aWRj aGFydmV5QDx3YnI+Z29vZ2xlbWFpbC5jb208L2E+Jmd0OyZndDsgd3JvdGU6PGJyPg0KJmd0Ozxi cj4NCiZndDvCoCDCoCDCoEhpIGFnYWluLDxicj4NCiZndDs8YnI+DQomZ3Q7wqAgwqAgwqBObyBq b3kgeWV0IHdpdGggc3BvdHRpbmcgQ0EgYW5vbWFsaWVzLiBBbnkgYWRkaXRpb25hbCB0aXBzIHRo ZXJlIFJvYj88YnI+DQomZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgR2VudGxlIGJ1bXAgU2ltb24sIGFy ZSB5b3UgY29uZmlkZW50IHRoYXQgYnVpbGRpbmcgYSBuZXcgcmVwbGljYTxicj4NCiZndDvCoCDC oCDCoHdvbiYjMzk7dCBmYWxsIGZvdWwgb2YgdGhlIGJlbG93IGZyb20gdGhlIHVwZ3JhZGUgcGFn ZSAodGhlIHNjaGVtYSBwYXJ0KTo8YnI+DQomZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgV29yZHMgb2Yg Y2F1dGlvbjxicj4NCiZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAqIE5vdGUgdGhhdCB0aGUgc2Vy dmVyIGlzIGluIGEgKm1haW50ZW5hbmNlIG1vZGUqIGR1cmluZyB1cGdyYWRlPGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgYW5kIGRvZXMgbm90IHJlc3BvbmQgdG8gcmVxdWVzdHMhPGJyPg0KJmd0O8Kg IMKgIMKgIMKgKiBTY2hlbWEgb3IgRGlyZWN0b3J5IFNlcnZlcjxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCZsdDs8YSBocmVmPSJodHRwczovL3d3dy5mcmVlaXBhLm9yZy9wYWdlL0RpcmVjdG9yeV9T ZXJ2ZXIiIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmZyZWVp cGEub3JnL3BhZ2UvPHdicj5EaXJlY3RvcnlfU2VydmVyPC9hPiZndDsgZGF0YWJhc2Ugb2JqZWN0 PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgY2hhbmdlcyBkb25lIGR1cmluZyB0aGUgdXBncmFkZSBh cmUgcmVwbGljYXRlZCB0byAqYWxsIEZyZWVJUEE8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBtYXN0 ZXJzKjxicj4NCiZndDs8YnI+DQomZ3Q7wqAgwqAgwqAqPGJyPg0KJmd0O8KgIMKgIMKgKjxicj4N CiZndDvCoCDCoCDCoFRoYW5rcyBhZ2FpbiBmb3IgdGhlIHN1cHBvcnQsPGJyPg0KJmd0Ozxicj4N CiZndDvCoCDCoCDCoERhdmlkPGJyPg0KJmd0Ozxicj4NCiZndDvCoCDCoCDCoE9uIDE1IE5vdmVt YmVyIDIwMTcgYXQgMTY6NTIsIERhdmlkIEhhcnZleTxicj4NCiZndDvCoCDCoCDCoCZsdDs8YSBo cmVmPSJtYWlsdG86ZGF2aWRjaGFydmV5QGdvb2dsZW1haWwuY29tIj5kYXZpZGNoYXJ2ZXlAZ29v Z2xlbWFpbC5jb208L2E+ICZsdDttYWlsdG86PGEgaHJlZj0ibWFpbHRvOmRhdmlkY2hhcnZleUBn b29nbGVtYWlsLmNvbSI+ZGF2aWRjaGFydmV5QDx3YnI+Z29vZ2xlbWFpbC5jb208L2E+Jmd0OyZn dDs8YnI+DQomZ3Q7wqAgwqAgwqB3cm90ZTo8YnI+DQomZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgVGhhbmtzIFJvYiwgU2ltb24sPGJyPg0KJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoFJv Yiwgd2lsbCBjaGVjaywgYnV0IHRob3VnaHQgbXkgY2VydCBzeXN0ZW0gd2FzIGhlYWx0aHkgYmVm b3JlLjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoEl0JiMzOTtzIHJlbGF0aXZlbHkgbmV3ICg2bW9u dGhzIG9yIGxlc3MpLCBhbmQgbm8gc3ViLWNhJiMzOTtzPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg aW52b2x2ZWQuLiBBbnkgc3BlY2lmaWNzIG9uIGhvdyB0byBpbnZva2UgdGhlIHNlbGZ0ZXN0cyBp biBzb21lPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgbWFubmVyIHRoYXQgbWlnaHQgcHJvdmlkZSBk aWdlc3RpYmxlIG91dHB1dD8gT3IgY291bGQgaXQgYmUgbXk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqBkaXJ0eSBoYWNrIG9mIGNsb25pbmcgYW5kIGlzb2xhdGlvbiBhbmQgSSBzaG91bGQgZG8gYXMg U2ltb248YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBzdWdnZXN0ZWQgOik/PGJyPg0KJmd0Ozxicj4N CiZndDvCoCDCoCDCoCDCoCDCoFNpbW9uLiBXUlQgc3Bpbm5pbmcgdXAgYSByZXBsaWNhLiBJIHdh cyB1bmRlciB0aGUgaW1wcmVzc2lvbjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoHRoYXQgYWxsIHJ1 bm5pbmcgc2VydmVycyBoYWQgdG8gYmUgb2YgdGhlIHNhbWUgdmVyc2lvbiwgYW0gSTxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoG1pc3Rha2VuIHdpdGggdGhhdD88YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqBJIGhhZCBhdm9pZGVkIHdoYXQgeW91IHdlcmUgc3VnZ2VzdGluZyBhcyBJIGZlYXJlZCB0aGUg bmV3PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgc2VydmVyIG1pZ2h0IHVwZGF0ZSB0aGUgc2NoZW1h IG9uIHRoZSBleGlzdGluZyBvbmVzITxicj4NCiZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqBU aGFua3MgYWdhaW4sIGFwcHJlY2lhdGUgdGhlIHN0ZWVyaW5nITxicj4NCiZndDs8YnI+DQomZ3Q7 PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgT24gMTUgTm92IDIwMTcgMTQ6MzQsICZxdW90O1JvYiBD cml0dGVuZGVuJnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86cmNyaXR0ZW5AcmVkaGF0LmNvbSI+ cmNyaXR0ZW5AcmVkaGF0LmNvbTwvYT48YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAmbHQ7bWFpbHRv OjxhIGhyZWY9Im1haWx0bzpyY3JpdHRlbkByZWRoYXQuY29tIj5yY3JpdHRlbkByZWRoYXQuY29t PC9hPiZndDsmZ3Q7IHdyb3RlOjxicj4NCiZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAg wqBEYXZpZCBIYXJ2ZXkgdmlhIEZyZWVJUEEtdXNlcnMgd3JvdGU6PGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgIMKgIMKgJmd0OyBTb3JyeSBmb3IgdGhlIGR1bXAgc2l6ZSwgYnV0IG5vdCBzdXJlIGlm IHRoZSBiZWxvdyBmcm9tPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyAvdmFyL2xv Zy9wa2kvcGtpLXRvbWNhdC88d2JyPmxvY2FsaG9zdC5kYXRlLmxvZyBoZWxwczo8YnI+DQomZ3Q7 PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgTG9va3MgbGlrZSB0aGUgc2VsZnRlc3RzIGFy ZSBmYWlsaW5nLiBJJiMzOTtkIGNoZWNrIHRoYXQgeW91ciBDQTxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCDCoCDCoHN1YnN5c3RlbTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoGNlcnRpZmlj YXRlcyBhcmUgbm90IGV4cGlyZWQsIGV0Yy48YnI+DQomZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgIMKgIMKgcm9iPGJyPg0KJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IDE1LU5vdi0yMDE3IDEyOjE0OjUwLjU1 NyBTRVZFUkUgW2xvY2FsaG9zdC1zdGFydFN0b3AtMV08YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAg wqAgwqAmZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS48d2JyPkFwcGxpY2F0aW9uQ29udGV4 dC5sb2c8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBTdGFuZGFyZFdyYXBwZXIuVGhyb3dh YmxlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIGphdmEubGFuZy5OdWxsUG9p bnRlckV4Y2VwdGlvbjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKg Y29tLm5ldHNjYXBlLmNtc2NvcmUuPHdicj5zZWxmdGVzdHMuU2VsZlRlc3RTdWJzeXN0ZW0uPHdi cj5zaHV0ZG93bihTZWxmVGVzdFN1YnN5c3RlbS48d2JyPmphdmE6MTg4Nik8YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0 Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoGNvbS5uZXRzY2FwZS5jbXNjb3JlLmFwcHMu PHdicj5DTVNFbmdpbmUuc2h1dGRvd25TdWJzeXN0ZW1zKDx3YnI+Q01TRW5naW5lLmphdmE6MjEx OCk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgIMKgIMKgY29tLm5ldHNjYXBlLmNtc2NvcmUuYXBwcy48d2JyPkNNU0VuZ2luZS5zaHV0 ZG93bihDTVNFbmdpbmUuPHdicj5qYXZhOjIwMTMpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKg IMKgJmd0OyBhdCBjb20ubmV0c2NhcGUuY2VydHNydi5hcHBzLkNNUy48d2JyPnNodXRkb3duKENN Uy5qYXZhOjIzNCk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0IGNvbS5uZXRz Y2FwZS5jZXJ0c3J2LmFwcHMuQ01TLjx3YnI+c3RhcnQoQ01TLmphdmE6MTYzMCk8YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKg Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoGNvbS5uZXRzY2FwZS5jbXMuc2Vydmxl dC5iYXNlLjx3YnI+Q01TU3RhcnRTZXJ2bGV0LmluaXQoPHdicj5DTVNTdGFydFNlcnZsZXQuamF2 YToxMTQpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdCBqYXZheC5zZXJ2bGV0 LkdlbmVyaWNTZXJ2bGV0Ljx3YnI+aW5pdChHZW5lcmljU2VydmxldC5qYXZhOjE1OCk8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKg IMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoG9yZy5hcGFjaGUuY2F0YWxpbmEu Y29yZS48d2JyPlN0YW5kYXJkV3JhcHBlci5pbml0U2VydmxldCg8d2JyPlN0YW5kYXJkV3JhcHBl ci5qYXZhOjEyMjcpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBv cmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5TdGFuZGFyZFdyYXBwZXIubG9hZFNlcnZsZXQo PHdicj5TdGFuZGFyZFdyYXBwZXIuamF2YToxMTQwKTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDC oCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBvcmcuYXBhY2hlLmNhdGFs aW5hLmNvcmUuPHdicj5TdGFuZGFyZFdyYXBwZXIubG9hZCg8d2JyPlN0YW5kYXJkV3JhcHBlci5q YXZhOjEwMjcpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZndDvC oCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBvcmcu YXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5TdGFuZGFyZENvbnRleHQubG9hZE9uU3RhcnR1cCg8 d2JyPlN0YW5kYXJkQ29udGV4dC5qYXZhOjUwMzgpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKg IMKgJmd0OyBhdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAgwqAgwqBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5TdGFuZGFyZENv bnRleHQuc3RhcnRJbnRlcm5hbCg8d2JyPlN0YW5kYXJkQ29udGV4dC5qYXZhOjUzNDgpPGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDC oCDCoG9yZy5hcGFjaGUuY2F0YWxpbmEudXRpbC48d2JyPkxpZmVjeWNsZUJhc2Uuc3RhcnQoPHdi cj5MaWZlY3ljbGVCYXNlLmphdmE6MTQ1KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZn dDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgIMKgIMKgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLjx3YnI+Q29udGFpbmVyQmFzZS48 d2JyPmFkZENoaWxkSW50ZXJuYWwoPHdicj5Db250YWluZXJCYXNlLmphdmE6NzUzKTxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAg wqBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5Db250YWluZXJCYXNlLmFkZENoaWxkKDx3 YnI+Q29udGFpbmVyQmFzZS5qYXZhOjcyOSk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAm Z3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgb3JnLmFwYWNoZS5jYXRhbGluYS5j b3JlLjx3YnI+U3RhbmRhcmRIb3N0LmFkZENoaWxkKDx3YnI+U3RhbmRhcmRIb3N0LmphdmE6NzE3 KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgb3JnLmFwYWNoZS5j YXRhbGluYS5zdGFydHVwLjx3YnI+SG9zdENvbmZpZy5kZXBsb3lEZXNjcmlwdG9yKDx3YnI+SG9z dENvbmZpZy5qYXZhOjYyMSk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDC oCDCoG9yZy5hcGFjaGUuY2F0YWxpbmEuc3RhcnR1cC48d2JyPkhvc3RDb25maWckRGVwbG95RGVz Y3JpcHRvci48d2JyPnJ1bihIb3N0Q29uZmlnLmphdmE6MTgzNSk8YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgamF2YS51dGls LmNvbmN1cnJlbnQuPHdicj5FeGVjdXRvcnMkUnVubmFibGVBZGFwdGVyLjx3YnI+Y2FsbChFeGVj dXRvcnMuamF2YTo1MTEpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdCBqYXZh LnV0aWwuY29uY3VycmVudC48d2JyPkZ1dHVyZVRhc2sucnVuKEZ1dHVyZVRhc2suPHdicj5qYXZh OjI2Nik8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKg IMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoGphdmEudXRp bC5jb25jdXJyZW50Ljx3YnI+VGhyZWFkUG9vbEV4ZWN1dG9yLnJ1bldvcmtlcig8d2JyPlRocmVh ZFBvb2xFeGVjdXRvci5qYXZhOjExNDkpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0 OyBhdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqAgwqAgwqBqYXZhLnV0aWwuY29uY3VycmVudC48d2JyPlRocmVhZFBvb2xFeGVjdXRvciRX b3JrZXIucnVuKDx3YnI+VGhyZWFkUG9vbEV4ZWN1dG9yLmphdmE6NjI0KTxicj4NCiZndDvCoCDC oCDCoCDCoCDCoCDCoCDCoCZndDsgYXQgamF2YS5sYW5nLlRocmVhZC5ydW4oVGhyZWFkLjx3YnI+ amF2YTo3NDgpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDC oCDCoCDCoCDCoCDCoCDCoCZndDsgMTUtTm92LTIwMTcgMTI6MTQ6NTAuNTU4IFNFVkVSRSBbbG9j YWxob3N0LXN0YXJ0U3RvcC0xXTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgb3Jn LmFwYWNoZS5jYXRhbGluYS5jb3JlLjx3YnI+U3RhbmRhcmRDb250ZXh0LmxvYWRPblN0YXJ0dXA8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBTZXJ2bGV0IFtjYXN0YXJ0XTxicj4NCiZndDvC oCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgaW4gd2ViIGFwcGxpY2F0aW9uIFsvY2FdIHRocmV3IGxv YWQoKSBleGNlcHRpb248YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7wqAgamF2YS5s YW5nLk51bGxQb2ludGVyRXhjZXB0aW9uPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0 OyBhdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqAgwqAgwqBjb20ubmV0c2NhcGUuY21zY29yZS48d2JyPnNlbGZ0ZXN0cy5TZWxmVGVzdFN1 YnN5c3RlbS48d2JyPnNodXRkb3duKFNlbGZUZXN0U3Vic3lzdGVtLjx3YnI+amF2YToxODg2KTxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgY29tLm5ldHNjYXBlLmNt c2NvcmUuYXBwcy48d2JyPkNNU0VuZ2luZS5zaHV0ZG93blN1YnN5c3RlbXMoPHdicj5DTVNFbmdp bmUuamF2YToyMTE4KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBjb20ubmV0c2NhcGUuY21zY29yZS5hcHBzLjx3YnI+Q01T RW5naW5lLnNodXRkb3duKENNU0VuZ2luZS48d2JyPmphdmE6MjAxMyk8YnI+DQomZ3Q7wqAgwqAg wqAgwqAgwqAgwqAgwqAmZ3Q7IGF0IGNvbS5uZXRzY2FwZS5jZXJ0c3J2LmFwcHMuQ01TLjx3YnI+ c2h1dGRvd24oQ01TLmphdmE6MjM0KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsg YXQgY29tLm5ldHNjYXBlLmNlcnRzcnYuYXBwcy5DTVMuPHdicj5zdGFydChDTVMuamF2YToxNjMw KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgY29tLm5ldHNjYXBl LmNtcy5zZXJ2bGV0LmJhc2UuPHdicj5DTVNTdGFydFNlcnZsZXQuaW5pdCg8d2JyPkNNU1N0YXJ0 U2VydmxldC5qYXZhOjExNCk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0IGph dmF4LnNlcnZsZXQuR2VuZXJpY1NlcnZsZXQuPHdicj5pbml0KEdlbmVyaWNTZXJ2bGV0LmphdmE6 MTU4KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAg wqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgb3JnLmFwYWNo ZS5jYXRhbGluYS5jb3JlLjx3YnI+U3RhbmRhcmRXcmFwcGVyLmluaXRTZXJ2bGV0KDx3YnI+U3Rh bmRhcmRXcmFwcGVyLmphdmE6MTIyNyk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7 IGF0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCDCoCDCoG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS48d2JyPlN0YW5kYXJkV3JhcHBlci5s b2FkU2VydmxldCg8d2JyPlN0YW5kYXJkV3JhcHBlci5qYXZhOjExNDApPGJyPg0KJmd0O8KgIMKg IMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoG9yZy5h cGFjaGUuY2F0YWxpbmEuY29yZS48d2JyPlN0YW5kYXJkV3JhcHBlci5sb2FkKDx3YnI+U3RhbmRh cmRXcmFwcGVyLmphdmE6MTAyNyk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0 PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDC oCDCoCDCoG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS48d2JyPlN0YW5kYXJkQ29udGV4dC5sb2Fk T25TdGFydHVwKDx3YnI+U3RhbmRhcmRDb250ZXh0LmphdmE6NTAzOCk8YnI+DQomZ3Q7wqAgwqAg wqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS48d2Jy PlN0YW5kYXJkQ29udGV4dC5zdGFydEludGVybmFsKDx3YnI+U3RhbmRhcmRDb250ZXh0LmphdmE6 NTM0OCk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKg IMKgIMKgIMKgIMKgIMKgb3JnLmFwYWNoZS5jYXRhbGluYS51dGlsLjx3YnI+TGlmZWN5Y2xlQmFz ZS5zdGFydCg8d2JyPkxpZmVjeWNsZUJhc2UuamF2YToxNDUpPGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgIMKgIMKgJmd0OyBhdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5Db250 YWluZXJCYXNlLjx3YnI+YWRkQ2hpbGRJbnRlcm5hbCg8d2JyPkNvbnRhaW5lckJhc2UuamF2YTo3 NTMpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCDCoCDCoG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS48d2JyPkNvbnRhaW5lckJhc2Uu YWRkQ2hpbGQoPHdicj5Db250YWluZXJCYXNlLmphdmE6NzI5KTxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBvcmcuYXBhY2hl LmNhdGFsaW5hLmNvcmUuPHdicj5TdGFuZGFyZEhvc3QuYWRkQ2hpbGQoPHdicj5TdGFuZGFyZEhv c3QuamF2YTo3MTcpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBv cmcuYXBhY2hlLmNhdGFsaW5hLnN0YXJ0dXAuPHdicj5Ib3N0Q29uZmlnLmRlcGxveURlc2NyaXB0 b3IoPHdicj5Ib3N0Q29uZmlnLmphdmE6NjIxKTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDC oCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKg IMKgIMKgIMKgIMKgIMKgb3JnLmFwYWNoZS5jYXRhbGluYS5zdGFydHVwLjx3YnI+SG9zdENvbmZp ZyREZXBsb3lEZXNjcmlwdG9yLjx3YnI+cnVuKEhvc3RDb25maWcuamF2YToxODM1KTxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAg wqBqYXZhLnV0aWwuY29uY3VycmVudC48d2JyPkV4ZWN1dG9ycyRSdW5uYWJsZUFkYXB0ZXIuPHdi cj5jYWxsKEV4ZWN1dG9ycy5qYXZhOjUxMSk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAm Z3Q7IGF0IGphdmEudXRpbC5jb25jdXJyZW50Ljx3YnI+RnV0dXJlVGFzay5ydW4oRnV0dXJlVGFz ay48d2JyPmphdmE6MjY2KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+ DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKg IMKgamF2YS51dGlsLmNvbmN1cnJlbnQuPHdicj5UaHJlYWRQb29sRXhlY3V0b3IucnVuV29ya2Vy KDx3YnI+VGhyZWFkUG9vbEV4ZWN1dG9yLmphdmE6MTE0OSk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCDCoCDCoGphdmEudXRpbC5jb25jdXJyZW50Ljx3YnI+VGhyZWFkUG9v bEV4ZWN1dG9yJFdvcmtlci5ydW4oPHdicj5UaHJlYWRQb29sRXhlY3V0b3IuamF2YTo2MjQpPGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdCBqYXZhLmxhbmcuVGhyZWFkLnJ1bihU aHJlYWQuPHdicj5qYXZhOjc0OCk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyAxNS1Ob3YtMjAxNyAxMjoxNDo1NC41MDkg U0VWRVJFIFtodHRwLWJpby04NDQzLWV4ZWMtMV08YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAg wqAmZ3Q7IG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS48d2JyPlN0YW5kYXJkSG9zdFZhbHZlLmlu dm9rZTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoEV4Y2VwdGlvbiBQcm9jZXNzaW5nPGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyAvY2EvcmVzdC9hY2NvdW50L2xvZ2luPGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIDxhIGhyZWY9Imh0dHA6Ly9qYXZheC53 cy5ycyIgcmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+amF2YXgud3MucnM8L2E+PGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmx0OzxhIGhyZWY9Imh0dHA6Ly9qYXZheC53cy5y cyIgcmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+aHR0cDovL2phdmF4LndzLnJzPC9h PiZndDsuPHdicj5TZXJ2aWNlVW5hdmFpbGFibGVFeGNlcHRpb246IFN1YnN5c3RlbTxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCDCoCDCoHVuYXZhaWxhYmxlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg IMKgIMKgJmd0OyBhdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqAgwqAgwqBjb20ubmV0c2NhcGUuY21zLnRvbWNhdC48d2JyPlByb3h5UmVh bG0uPHdicj5maW5kU2VjdXJpdHlDb25zdHJhaW50cyg8d2JyPlByb3h5UmVhbG0uamF2YToxMzgp PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBvcmcuYXBhY2hlLmNh dGFsaW5hLjx3YnI+YXV0aGVudGljYXRvci48d2JyPkF1dGhlbnRpY2F0b3JCYXNlLmludm9rZSg8 d2JyPkF1dGhlbnRpY2F0b3JCYXNlLmphdmE6NDk4KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDC oCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgIMKgIMKgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLjx3YnI+U3RhbmRhcmRI b3N0VmFsdmUuaW52b2tlKDx3YnI+U3RhbmRhcmRIb3N0VmFsdmUuamF2YToxNDEpPGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDC oCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBvcmcuYXBhY2hlLmNhdGFsaW5hLnZh bHZlcy48d2JyPkVycm9yUmVwb3J0VmFsdmUuaW52b2tlKDx3YnI+RXJyb3JSZXBvcnRWYWx2ZS5q YXZhOjc5KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgb3JnLmFw YWNoZS5jYXRhbGluYS52YWx2ZXMuPHdicj5BYnN0cmFjdEFjY2Vzc0xvZ1ZhbHZlLmludm9rZSg8 d2JyPkFic3RyYWN0QWNjZXNzTG9nVmFsdmUuamF2YTo8d2JyPjYyMCk8YnI+DQomZ3Q7wqAgwqAg wqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS48d2Jy PlN0YW5kYXJkRW5naW5lVmFsdmUuaW52b2tlKDx3YnI+U3RhbmRhcmRFbmdpbmVWYWx2ZS5qYXZh Ojg4KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAg wqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgb3JnLmFwYWNo ZS5jYXRhbGluYS5jb25uZWN0b3IuPHdicj5Db3lvdGVBZGFwdGVyLnNlcnZpY2UoPHdicj5Db3lv dGVBZGFwdGVyLmphdmE6NTAyKTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg IMKgIMKgb3JnLmFwYWNoZS5jb3lvdGUuaHR0cDExLjx3YnI+QWJzdHJhY3RIdHRwMTFQcm9jZXNz b3IuPHdicj5wcm9jZXNzKDx3YnI+QWJzdHJhY3RIdHRwMTFQcm9jZXNzb3IuamF2YTo8d2JyPjEx MzIpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBvcmcuYXBhY2hl LmNveW90ZS48d2JyPkFic3RyYWN0UHJvdG9jb2wkPHdicj5BYnN0cmFjdENvbm5lY3Rpb25IYW5k bGVyLjx3YnI+cHJvY2VzcyhBYnN0cmFjdFByb3RvY29sLmphdmE6PHdicj42ODQpPGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDC oCZndDsgPGEgaHJlZj0iaHR0cDovL29yZy5hcGFjaGUudG9tY2F0LnV0aWwubmV0IiByZWw9Im5v cmVmZXJyZXIiIHRhcmdldD0iX2JsYW5rIj5vcmcuYXBhY2hlLnRvbWNhdC51dGlsLm5ldDwvYT48 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmbHQ7PGEgaHJlZj0iaHR0cDovL29yZy5hcGFj aGUudG9tY2F0LnV0aWwubmV0IiByZWw9Im5vcmVmZXJyZXIiIHRhcmdldD0iX2JsYW5rIj5odHRw Oi8vb3JnLmFwYWNoZS50b21jYXQuPHdicj51dGlsLm5ldDwvYT4mZ3Q7LkpJb0VuZHBvaW50JDx3 YnI+U29ja2V0UHJvY2Vzc29yLnJ1big8d2JyPkpJb0VuZHBvaW50LmphdmE6MjgzKTxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAg wqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgamF2YS51dGlsLmNvbmN1cnJlbnQu PHdicj5UaHJlYWRQb29sRXhlY3V0b3IucnVuV29ya2VyKDx3YnI+VGhyZWFkUG9vbEV4ZWN1dG9y LmphdmE6MTE0OSk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoGph dmEudXRpbC5jb25jdXJyZW50Ljx3YnI+VGhyZWFkUG9vbEV4ZWN1dG9yJFdvcmtlci5ydW4oPHdi cj5UaHJlYWRQb29sRXhlY3V0b3IuamF2YTo2MjQpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKg IMKgJmd0OyBhdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAgwqAgwqBvcmcuYXBhY2hlLnRvbWNhdC51dGlsLjx3YnI+dGhyZWFkcy5UYXNr VGhyZWFkJDx3YnI+V3JhcHBpbmdSdW5uYWJsZS5ydW4oPHdicj5UYXNrVGhyZWFkLmphdmE6NjEp PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdCBqYXZhLmxhbmcuVGhyZWFkLnJ1 bihUaHJlYWQuPHdicj5qYXZhOjc0OCk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7 PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyAxNS1Ob3YtMjAxNyAxMzowNTo1NS44 NzQgU0VWRVJFIFtsb2NhbGhvc3Qtc3RhcnRTdG9wLTFdPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg IMKgIMKgJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5BcHBsaWNhdGlvbkNvbnRl eHQubG9nPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgU3RhbmRhcmRXcmFwcGVyLlRocm93 YWJsZTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCBqYXZhLmxhbmcuTnVsbFBv aW50ZXJFeGNlcHRpb248YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDC oGNvbS5uZXRzY2FwZS5jbXNjb3JlLjx3YnI+c2VsZnRlc3RzLlNlbGZUZXN0U3Vic3lzdGVtLjx3 YnI+c2h1dGRvd24oU2VsZlRlc3RTdWJzeXN0ZW0uPHdicj5qYXZhOjE4ODYpPGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZn dDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBjb20ubmV0c2NhcGUuY21zY29yZS5hcHBz Ljx3YnI+Q01TRW5naW5lLnNodXRkb3duU3Vic3lzdGVtcyg8d2JyPkNNU0VuZ2luZS5qYXZhOjIx MTgpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCDCoCDCoGNvbS5uZXRzY2FwZS5jbXNjb3JlLmFwcHMuPHdicj5DTVNFbmdpbmUuc2h1 dGRvd24oQ01TRW5naW5lLjx3YnI+amF2YToyMDEzKTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDC oCDCoCZndDsgYXQgY29tLm5ldHNjYXBlLmNlcnRzcnYuYXBwcy5DTVMuPHdicj5zaHV0ZG93bihD TVMuamF2YToyMzQpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdCBjb20ubmV0 c2NhcGUuY2VydHNydi5hcHBzLkNNUy48d2JyPnN0YXJ0KENNUy5qYXZhOjE2MzApPGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDC oCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBjb20ubmV0c2NhcGUuY21zLnNlcnZs ZXQuYmFzZS48d2JyPkNNU1N0YXJ0U2VydmxldC5pbml0KDx3YnI+Q01TU3RhcnRTZXJ2bGV0Lmph dmE6MTE0KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQgamF2YXguc2Vydmxl dC5HZW5lcmljU2VydmxldC48d2JyPmluaXQoR2VuZXJpY1NlcnZsZXQuamF2YToxNTgpPGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDC oCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBvcmcuYXBhY2hlLmNhdGFsaW5h LmNvcmUuPHdicj5TdGFuZGFyZFdyYXBwZXIuaW5pdFNlcnZsZXQoPHdicj5TdGFuZGFyZFdyYXBw ZXIuamF2YToxMjI3KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKg b3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLjx3YnI+U3RhbmRhcmRXcmFwcGVyLmxvYWRTZXJ2bGV0 KDx3YnI+U3RhbmRhcmRXcmFwcGVyLmphdmE6MTE0MCk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAg wqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgb3JnLmFwYWNoZS5jYXRh bGluYS5jb3JlLjx3YnI+U3RhbmRhcmRXcmFwcGVyLmxvYWQoPHdicj5TdGFuZGFyZFdyYXBwZXIu amF2YToxMDI3KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgb3Jn LmFwYWNoZS5jYXRhbGluYS5jb3JlLjx3YnI+U3RhbmRhcmRDb250ZXh0LmxvYWRPblN0YXJ0dXAo PHdicj5TdGFuZGFyZENvbnRleHQuamF2YTo1MDM4KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDC oCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgIMKgIMKgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLjx3YnI+U3RhbmRhcmRD b250ZXh0LnN0YXJ0SW50ZXJuYWwoPHdicj5TdGFuZGFyZENvbnRleHQuamF2YTo1MzQ4KTxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAg wqAgwqBvcmcuYXBhY2hlLmNhdGFsaW5hLnV0aWwuPHdicj5MaWZlY3ljbGVCYXNlLnN0YXJ0KDx3 YnI+TGlmZWN5Y2xlQmFzZS5qYXZhOjE0NSk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAm Z3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCDCoCDCoG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS48d2JyPkNvbnRhaW5lckJhc2Uu PHdicj5hZGRDaGlsZEludGVybmFsKDx3YnI+Q29udGFpbmVyQmFzZS5qYXZhOjc1Myk8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKg IMKgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLjx3YnI+Q29udGFpbmVyQmFzZS5hZGRDaGlsZCg8 d2JyPkNvbnRhaW5lckJhc2UuamF2YTo3MjkpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKg Jmd0OyBhdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoG9yZy5hcGFjaGUuY2F0YWxpbmEu Y29yZS48d2JyPlN0YW5kYXJkSG9zdC5hZGRDaGlsZCg8d2JyPlN0YW5kYXJkSG9zdC5qYXZhOjcx Nyk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoG9yZy5hcGFjaGUu Y2F0YWxpbmEuc3RhcnR1cC48d2JyPkhvc3RDb25maWcuZGVwbG95RGVzY3JpcHRvcig8d2JyPkhv c3RDb25maWcuamF2YTo2MjEpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAg wqAgwqBvcmcuYXBhY2hlLmNhdGFsaW5hLnN0YXJ0dXAuPHdicj5Ib3N0Q29uZmlnJERlcGxveURl c2NyaXB0b3IuPHdicj5ydW4oSG9zdENvbmZpZy5qYXZhOjE4MzUpPGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoGphdmEudXRp bC5jb25jdXJyZW50Ljx3YnI+RXhlY3V0b3JzJFJ1bm5hYmxlQWRhcHRlci48d2JyPmNhbGwoRXhl Y3V0b3JzLmphdmE6NTExKTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQgamF2 YS51dGlsLmNvbmN1cnJlbnQuPHdicj5GdXR1cmVUYXNrLnJ1bihGdXR1cmVUYXNrLjx3YnI+amF2 YToyNjYpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZndDvCoCDC oCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBqYXZhLnV0 aWwuY29uY3VycmVudC48d2JyPlRocmVhZFBvb2xFeGVjdXRvci5ydW5Xb3JrZXIoPHdicj5UaHJl YWRQb29sRXhlY3V0b3IuamF2YToxMTQ5KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZn dDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgIMKgIMKgamF2YS51dGlsLmNvbmN1cnJlbnQuPHdicj5UaHJlYWRQb29sRXhlY3V0b3Ik V29ya2VyLnJ1big8d2JyPlRocmVhZFBvb2xFeGVjdXRvci5qYXZhOjYyNCk8YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0IGphdmEubGFuZy5UaHJlYWQucnVuKFRocmVhZC48d2Jy PmphdmE6NzQ4KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IDE1LU5vdi0yMDE3IDEzOjA1OjU1Ljg3NSBTRVZFUkUgW2xv Y2FsaG9zdC1zdGFydFN0b3AtMV08YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IG9y Zy5hcGFjaGUuY2F0YWxpbmEuY29yZS48d2JyPlN0YW5kYXJkQ29udGV4dC5sb2FkT25TdGFydHVw PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgU2VydmxldCBbY2FzdGFydF08YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGluIHdlYiBhcHBsaWNhdGlvbiBbL2NhXSB0aHJldyBs b2FkKCkgZXhjZXB0aW9uPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIGphdmEu bGFuZy5OdWxsUG9pbnRlckV4Y2VwdGlvbjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZn dDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgIMKgIMKgY29tLm5ldHNjYXBlLmNtc2NvcmUuPHdicj5zZWxmdGVzdHMuU2VsZlRlc3RT dWJzeXN0ZW0uPHdicj5zaHV0ZG93bihTZWxmVGVzdFN1YnN5c3RlbS48d2JyPmphdmE6MTg4Nik8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoGNvbS5uZXRzY2FwZS5j bXNjb3JlLmFwcHMuPHdicj5DTVNFbmdpbmUuc2h1dGRvd25TdWJzeXN0ZW1zKDx3YnI+Q01TRW5n aW5lLmphdmE6MjExOCk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgY29tLm5ldHNjYXBlLmNtc2NvcmUuYXBwcy48d2JyPkNN U0VuZ2luZS5zaHV0ZG93bihDTVNFbmdpbmUuPHdicj5qYXZhOjIwMTMpPGJyPg0KJmd0O8KgIMKg IMKgIMKgIMKgIMKgIMKgJmd0OyBhdCBjb20ubmV0c2NhcGUuY2VydHNydi5hcHBzLkNNUy48d2Jy PnNodXRkb3duKENNUy5qYXZhOjIzNCk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7 IGF0IGNvbS5uZXRzY2FwZS5jZXJ0c3J2LmFwcHMuQ01TLjx3YnI+c3RhcnQoQ01TLmphdmE6MTYz MCk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoGNvbS5uZXRzY2Fw ZS5jbXMuc2VydmxldC5iYXNlLjx3YnI+Q01TU3RhcnRTZXJ2bGV0LmluaXQoPHdicj5DTVNTdGFy dFNlcnZsZXQuamF2YToxMTQpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdCBq YXZheC5zZXJ2bGV0LkdlbmVyaWNTZXJ2bGV0Ljx3YnI+aW5pdChHZW5lcmljU2VydmxldC5qYXZh OjE1OCk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKg IMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoG9yZy5hcGFj aGUuY2F0YWxpbmEuY29yZS48d2JyPlN0YW5kYXJkV3JhcHBlci5pbml0U2VydmxldCg8d2JyPlN0 YW5kYXJkV3JhcHBlci5qYXZhOjEyMjcpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0 OyBhdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqAgwqAgwqBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5TdGFuZGFyZFdyYXBwZXIu bG9hZFNlcnZsZXQoPHdicj5TdGFuZGFyZFdyYXBwZXIuamF2YToxMTQwKTxicj4NCiZndDvCoCDC oCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBvcmcu YXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5TdGFuZGFyZFdyYXBwZXIubG9hZCg8d2JyPlN0YW5k YXJkV3JhcHBlci5qYXZhOjEwMjcpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBh dDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAgwqAgwqBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5TdGFuZGFyZENvbnRleHQubG9h ZE9uU3RhcnR1cCg8d2JyPlN0YW5kYXJkQ29udGV4dC5qYXZhOjUwMzgpPGJyPg0KJmd0O8KgIMKg IMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdi cj5TdGFuZGFyZENvbnRleHQuc3RhcnRJbnRlcm5hbCg8d2JyPlN0YW5kYXJkQ29udGV4dC5qYXZh OjUzNDgpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZndDvCoCDC oCDCoCDCoCDCoCDCoCDCoG9yZy5hcGFjaGUuY2F0YWxpbmEudXRpbC48d2JyPkxpZmVjeWNsZUJh c2Uuc3RhcnQoPHdicj5MaWZlY3ljbGVCYXNlLmphdmE6MTQ1KTxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgb3JnLmFwYWNoZS5jYXRhbGluYS5jb3JlLjx3YnI+Q29u dGFpbmVyQmFzZS48d2JyPmFkZENoaWxkSW50ZXJuYWwoPHdicj5Db250YWluZXJCYXNlLmphdmE6 NzUzKTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAg wqAgwqAgwqAgwqAgwqBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5Db250YWluZXJCYXNl LmFkZENoaWxkKDx3YnI+Q29udGFpbmVyQmFzZS5qYXZhOjcyOSk8YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgb3JnLmFwYWNo ZS5jYXRhbGluYS5jb3JlLjx3YnI+U3RhbmRhcmRIb3N0LmFkZENoaWxkKDx3YnI+U3RhbmRhcmRI b3N0LmphdmE6NzE3KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKg b3JnLmFwYWNoZS5jYXRhbGluYS5zdGFydHVwLjx3YnI+SG9zdENvbmZpZy5kZXBsb3lEZXNjcmlw dG9yKDx3YnI+SG9zdENvbmZpZy5qYXZhOjYyMSk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAg wqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDC oCDCoCDCoCDCoCDCoCDCoG9yZy5hcGFjaGUuY2F0YWxpbmEuc3RhcnR1cC48d2JyPkhvc3RDb25m aWckRGVwbG95RGVzY3JpcHRvci48d2JyPnJ1bihIb3N0Q29uZmlnLmphdmE6MTgzNSk8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKg IMKgamF2YS51dGlsLmNvbmN1cnJlbnQuPHdicj5FeGVjdXRvcnMkUnVubmFibGVBZGFwdGVyLjx3 YnI+Y2FsbChFeGVjdXRvcnMuamF2YTo1MTEpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKg Jmd0OyBhdCBqYXZhLnV0aWwuY29uY3VycmVudC48d2JyPkZ1dHVyZVRhc2sucnVuKEZ1dHVyZVRh c2suPHdicj5qYXZhOjI2Nik8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDC oCDCoGphdmEudXRpbC5jb25jdXJyZW50Ljx3YnI+VGhyZWFkUG9vbEV4ZWN1dG9yLnJ1bldvcmtl cig8d2JyPlRocmVhZFBvb2xFeGVjdXRvci5qYXZhOjExNDkpPGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgIMKgIMKgJmd0OyBhdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBqYXZhLnV0aWwuY29uY3VycmVudC48d2JyPlRocmVhZFBv b2xFeGVjdXRvciRXb3JrZXIucnVuKDx3YnI+VGhyZWFkUG9vbEV4ZWN1dG9yLmphdmE6NjI0KTxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQgamF2YS5sYW5nLlRocmVhZC5ydW4o VGhyZWFkLjx3YnI+amF2YTo3NDgpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgMTUtTm92LTIwMTcgMTM6MDU6NTkuNzA2 IFNFVkVSRSBbaHR0cC1iaW8tODQ0My1leGVjLTFdPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKg IMKgJmd0OyBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdicj5TdGFuZGFyZEhvc3RWYWx2ZS5p bnZva2U8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBFeGNlcHRpb24gUHJvY2Vzc2luZzxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgL2NhL3Jlc3QvYWNjb3VudC9sb2dpbjxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCA8YSBocmVmPSJodHRwOi8vamF2YXgu d3MucnMiIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsiPmphdmF4LndzLnJzPC9hPjxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZsdDs8YSBocmVmPSJodHRwOi8vamF2YXgud3Mu cnMiIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsiPmh0dHA6Ly9qYXZheC53cy5yczwv YT4mZ3Q7Ljx3YnI+U2VydmljZVVuYXZhaWxhYmxlRXhjZXB0aW9uOiBTdWJzeXN0ZW08YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqB1bmF2YWlsYWJsZTxicj4NCiZndDvCoCDCoCDCoCDCoCDC oCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgIMKgIMKgY29tLm5ldHNjYXBlLmNtcy50b21jYXQuPHdicj5Qcm94eVJl YWxtLjx3YnI+ZmluZFNlY3VyaXR5Q29uc3RyYWludHMoPHdicj5Qcm94eVJlYWxtLmphdmE6MTM4 KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgb3JnLmFwYWNoZS5j YXRhbGluYS48d2JyPmF1dGhlbnRpY2F0b3IuPHdicj5BdXRoZW50aWNhdG9yQmFzZS5pbnZva2Uo PHdicj5BdXRoZW50aWNhdG9yQmFzZS5qYXZhOjQ5OCk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAg wqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvC oCDCoCDCoCDCoCDCoCDCoCDCoG9yZy5hcGFjaGUuY2F0YWxpbmEuY29yZS48d2JyPlN0YW5kYXJk SG9zdFZhbHZlLmludm9rZSg8d2JyPlN0YW5kYXJkSG9zdFZhbHZlLmphdmE6MTQxKTxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAg wqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgb3JnLmFwYWNoZS5jYXRhbGluYS52 YWx2ZXMuPHdicj5FcnJvclJlcG9ydFZhbHZlLmludm9rZSg8d2JyPkVycm9yUmVwb3J0VmFsdmUu amF2YTo3OSk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoG9yZy5h cGFjaGUuY2F0YWxpbmEudmFsdmVzLjx3YnI+QWJzdHJhY3RBY2Nlc3NMb2dWYWx2ZS5pbnZva2Uo PHdicj5BYnN0cmFjdEFjY2Vzc0xvZ1ZhbHZlLmphdmE6PHdicj42MjApPGJyPg0KJmd0O8KgIMKg IMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBvcmcuYXBhY2hlLmNhdGFsaW5hLmNvcmUuPHdi cj5TdGFuZGFyZEVuZ2luZVZhbHZlLmludm9rZSg8d2JyPlN0YW5kYXJkRW5naW5lVmFsdmUuamF2 YTo4OCk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKg IMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoG9yZy5hcGFj aGUuY2F0YWxpbmEuY29ubmVjdG9yLjx3YnI+Q295b3RlQWRhcHRlci5zZXJ2aWNlKDx3YnI+Q295 b3RlQWRhcHRlci5qYXZhOjUwMik8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0 PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDC oCDCoCDCoG9yZy5hcGFjaGUuY295b3RlLmh0dHAxMS48d2JyPkFic3RyYWN0SHR0cDExUHJvY2Vz c29yLjx3YnI+cHJvY2Vzcyg8d2JyPkFic3RyYWN0SHR0cDExUHJvY2Vzc29yLmphdmE6PHdicj4x MTMyKTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAg wqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgb3JnLmFwYWNo ZS5jb3lvdGUuPHdicj5BYnN0cmFjdFByb3RvY29sJDx3YnI+QWJzdHJhY3RDb25uZWN0aW9uSGFu ZGxlci48d2JyPnByb2Nlc3MoQWJzdHJhY3RQcm90b2NvbC5qYXZhOjx3YnI+Njg0KTxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAg wqAmZ3Q7IDxhIGhyZWY9Imh0dHA6Ly9vcmcuYXBhY2hlLnRvbWNhdC51dGlsLm5ldCIgcmVsPSJu b3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+b3JnLmFwYWNoZS50b21jYXQudXRpbC5uZXQ8L2E+ PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmx0OzxhIGhyZWY9Imh0dHA6Ly9vcmcuYXBh Y2hlLnRvbWNhdC51dGlsLm5ldCIgcmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+aHR0 cDovL29yZy5hcGFjaGUudG9tY2F0Ljx3YnI+dXRpbC5uZXQ8L2E+Jmd0Oy5KSW9FbmRwb2ludCQ8 d2JyPlNvY2tldFByb2Nlc3Nvci5ydW4oPHdicj5KSW9FbmRwb2ludC5qYXZhOjI4Myk8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IGF0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKg IMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoGphdmEudXRpbC5jb25jdXJyZW50 Ljx3YnI+VGhyZWFkUG9vbEV4ZWN1dG9yLnJ1bldvcmtlcig8d2JyPlRocmVhZFBvb2xFeGVjdXRv ci5qYXZhOjExNDkpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBhdDxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBq YXZhLnV0aWwuY29uY3VycmVudC48d2JyPlRocmVhZFBvb2xFeGVjdXRvciRXb3JrZXIucnVuKDx3 YnI+VGhyZWFkUG9vbEV4ZWN1dG9yLmphdmE6NjI0KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDC oCDCoCZndDsgYXQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgIMKgIMKgb3JnLmFwYWNoZS50b21jYXQudXRpbC48d2JyPnRocmVhZHMuVGFz a1RocmVhZCQ8d2JyPldyYXBwaW5nUnVubmFibGUucnVuKDx3YnI+VGFza1RocmVhZC5qYXZhOjYx KTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDsgYXQgamF2YS5sYW5nLlRocmVhZC5y dW4oVGhyZWFkLjx3YnI+amF2YTo3NDgpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0 Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAgwqAgwqAmZ3Q7IE9uIDE1IE5vdmVtYmVyIDIwMTcgYXQgMTM6MjMsIERhdmlkIEhhcnZleTxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZsdDs8YSBocmVmPSJtYWlsdG86ZGF2aWRjaGFy dmV5QGdvb2dsZW1haWwuY29tIj5kYXZpZGNoYXJ2ZXlAZ29vZ2xlbWFpbC5jb208L2E+PGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86ZGF2aWRj aGFydmV5QGdvb2dsZW1haWwuY29tIj5kYXZpZGNoYXJ2ZXlAPHdicj5nb29nbGVtYWlsLmNvbTwv YT4mZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyAmbHQ7bWFpbHRvOjxhIGhy ZWY9Im1haWx0bzpkYXZpZGNoYXJ2ZXlAZ29vZ2xlbWFpbC5jb20iPmRhdmlkY2hhcnZleUA8d2Jy Pmdvb2dsZW1haWwuY29tPC9hPjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZsdDttYWls dG86PGEgaHJlZj0ibWFpbHRvOmRhdmlkY2hhcnZleUBnb29nbGVtYWlsLmNvbSI+ZGF2aWRjaGFy dmV5QDx3YnI+Z29vZ2xlbWFpbC5jb208L2E+Jmd0OyZndDsmZ3Q7IHdyb3RlOjxicj4NCiZndDvC oCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7 wqAgwqAgwqBIaSB3aXNkb20gb2YgdGhlIGxpc3QsPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKg IMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoEkga25vdyBJ IGFtIGFuIGVkZ2UgY2FzZSB3aXRoIHJ1bm5pbmcgb24gdWJ1bnR1LCBidXQ8YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAgwqAgwqBob3BlZCBzb21lb25lPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKg IMKgJmd0O8KgIMKgIMKgbWlnaHQgYmUgYWJsZSB0byBzaGVkIHNvbWUgbGlnaHQuPGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZn dDvCoCDCoCDCoEEgYml0IG9mIGJhY2tncm91bmQuwqAgSSYjMzk7bSB0cnlpbmcgdG8gdGVzdCB1 cGdyYWRlcyB3aXRob3V0PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKg cG90ZW50aWFsbHkgaG9zaW5nIG15IGV4aXN0aW5nIHNlcnZpY2VzLCBzbyBJIGhhdmU8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBjbG9uZWQgdGhlIFZNLDxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCDCoCDCoCZndDvCoCDCoCDCoGdpdmVuIGl0IGEgbmV3IElQIGFkZHJlc3MsIHVwZGF0ZWQg aG9zdHMgZmlsZSBhbmQ8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBwb2ludGVkIEROUzxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoHNvbWV3aGVyZSB0aGF0IGRv ZXNuJiMzOTt0IGtub3cgYWJvdXQgdGhlIHJlYWwgSVBBPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg IMKgIMKgc2VydmljZXMgKDguOC44LjgpIHNvPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKg Jmd0O8KgIMKgIMKgaXQgd29uJiMzOTt0IHRyeSBhbmQgc3luYyBvciByZXBsaWNhdGUuPGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDC oCZndDvCoCDCoCDCoEF0dGVtcHRpbmcgdG8gdXBncmFkZSBoaXRzIGEgc25hZ3Mgb3IgdHdvLCBz b21lPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgZGVzY3JpYmVkIGluIGJ1Z3M8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqBhbHJlYWR5IGxpa2UgdGhlIHBraSB2 ZXJzaW9uIG51bWJlciBjb25mdXNpbmcgdGhlIGFwdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDC oCDCoCZndDvCoCDCoCDCoHNjcmlwdHM8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqA8YSBo cmVmPSJodHRwczovL2J1Z3MubGF1bmNocGFkLm5ldC91YnVudHUvK3NvdXJjZS9mcmVlaXBhLyti dWcvMTcwMzA1MSIgcmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly9idWdz LmxhdW5jaHBhZC5uZXQvPHdicj51YnVudHUvK3NvdXJjZS9mcmVlaXBhLytidWcvPHdicj4xNzAz MDUxPC9hPjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZsdDs8YSBocmVmPSJodHRwczov L2J1Z3MubGF1bmNocGFkLm5ldC91YnVudHUvK3NvdXJjZS9mcmVlaXBhLytidWcvMTcwMzA1MSIg cmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly9idWdzLmxhdW5jaHBhZC5u ZXQvPHdicj51YnVudHUvK3NvdXJjZS9mcmVlaXBhLytidWcvPHdicj4xNzAzMDUxPC9hPiZndDs8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg IMKgIMKgICZsdDs8YSBocmVmPSJodHRwczovL2J1Z3MubGF1bmNocGFkLm5ldC91YnVudHUvK3Nv dXJjZS9mcmVlaXBhLytidWcvMTcwMzA1MSIgcmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFu ayI+aHR0cHM6Ly9idWdzLmxhdW5jaHBhZC5uZXQvPHdicj51YnVudHUvK3NvdXJjZS9mcmVlaXBh LytidWcvPHdicj4xNzAzMDUxPC9hPjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZsdDs8 YSBocmVmPSJodHRwczovL2J1Z3MubGF1bmNocGFkLm5ldC91YnVudHUvK3NvdXJjZS9mcmVlaXBh LytidWcvMTcwMzA1MSIgcmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly9i dWdzLmxhdW5jaHBhZC5uZXQvPHdicj51YnVudHUvK3NvdXJjZS9mcmVlaXBhLytidWcvPHdicj4x NzAzMDUxPC9hPiZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgKS48YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqBUaGUgb25lIEkgY2FuJiMzOTt0IHdv cmsgYXJvdW5kIGhvd2V2ZXIgaXMgYmVsb3cuPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKg Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoEl0IHNlZW1zIGRl ZXBseSB1bmhhcHB5LCBhbmQgcmVzdGFydGluZyB0aGUgc2VydmljZXM8YnI+DQomZ3Q7wqAgwqAg wqAgwqAgwqAgwqAgwqByZXN1bHQgaW4gdGhlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKg Jmd0O8KgIMKgIMKgZG9ndGFnLXBraSB3ZWIgcGFnZSBiZWluZyBhdmFpbGFibGUgdW50aWwgYSBs b2dpbjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoGF0dGVtcHQgaXMgbWFkZTxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoChhcyBvY2N1cnMgZHVyaW5nIHRoZSBp cGEtc2VydmVyLXVwZ3JhZGUpIGFmdGVyIHdoaWNoPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKg IMKgcG9pbnQgaXQgYm9tYnM8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAg wqB3aXRoIGEgNTAwIGVycm9yLjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+ DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqBDb3VsZCB0aGUgYmVsb3cgY2F1 c2VkPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgYnk8YnI+DQomZ3Q7 wqAgwqAgwqAgwqAgwqAgwqAgwqA8YSBocmVmPSJodHRwczovL2J1Z3MubGF1bmNocGFkLm5ldC91 YnVudHUvK3NvdXJjZS9mcmVlaXBhLytidWcvMTcxNjg0MiIgcmVsPSJub3JlZmVycmVyIiB0YXJn ZXQ9Il9ibGFuayI+aHR0cHM6Ly9idWdzLmxhdW5jaHBhZC5uZXQvPHdicj51YnVudHUvK3NvdXJj ZS9mcmVlaXBhLytidWcvPHdicj4xNzE2ODQyPC9hPjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDC oCDCoCZsdDs8YSBocmVmPSJodHRwczovL2J1Z3MubGF1bmNocGFkLm5ldC91YnVudHUvK3NvdXJj ZS9mcmVlaXBhLytidWcvMTcxNjg0MiIgcmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+ aHR0cHM6Ly9idWdzLmxhdW5jaHBhZC5uZXQvPHdicj51YnVudHUvK3NvdXJjZS9mcmVlaXBhLyti dWcvPHdicj4xNzE2ODQyPC9hPiZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7 PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgICZsdDs8YSBocmVmPSJodHRwczovL2J1Z3Mu bGF1bmNocGFkLm5ldC91YnVudHUvK3NvdXJjZS9mcmVlaXBhLytidWcvMTcxNjg0MiIgcmVsPSJu b3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly9idWdzLmxhdW5jaHBhZC5uZXQvPHdi cj51YnVudHUvK3NvdXJjZS9mcmVlaXBhLytidWcvPHdicj4xNzE2ODQyPC9hPjxicj4NCiZndDvC oCDCoCDCoCDCoCDCoCDCoCDCoCZsdDs8YSBocmVmPSJodHRwczovL2J1Z3MubGF1bmNocGFkLm5l dC91YnVudHUvK3NvdXJjZS9mcmVlaXBhLytidWcvMTcxNjg0MiIgcmVsPSJub3JlZmVycmVyIiB0 YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly9idWdzLmxhdW5jaHBhZC5uZXQvPHdicj51YnVudHUvK3Nv dXJjZS9mcmVlaXBhLytidWcvPHdicj4xNzE2ODQyPC9hPiZndDsmZ3Q7PGJyPg0KJmd0O8KgIMKg IMKgIMKgIMKgIMKgIMKgPzxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqBBbnkgYWR2aWNlIGFwcHJlY2lhdGVk LCBhcyBJIHRoaW5rIGV2ZW4gd2hlbiAxOC4wNDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDC oGhpdHMgd2l0aCB0aGU8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqBw cm9wb3NlZCB1cGRhdGVzIHRvIHJlbHkgb24gdG8gdG9tY2F0IDguNSwgSSYjMzk7bGwgc3RpbGw8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBuZWVkIHRvPGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgIMKgIMKgJmd0O8KgIMKgIMKgdXBncmFkZSB2aWEgMTcuMTAgd2hpY2ggc2VlbXMgY3VycmVu dGx5IGZyYXVnaHQhwqAgSWY8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBpdCByZWxhdGVz IHRvPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgbXkgbWV0aG9kIG9m IGNsb25pbmcgdGhlIFZNLCBpcyB0aGVyZSBhIGJldHRlciB3YXkgb2Y8YnI+DQomZ3Q7wqAgwqAg wqAgwqAgwqAgwqAgwqB0ZXN0aW5nPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8Kg IMKgIMKgdXBncmFkZXMgd2l0aG91dCBwb3RlbnRpYWxseSBob3NpbmcgdGhlIGV4aXN0aW5nIGxp dmU8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBzeXN0ZW1zPzxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgVGhhbmtzIGluIGFkdmFuY2UsPGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDC oCDCoCZndDvCoCDCoCDCoERhdmlkPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoDIwMTctMTEtMTVUMTM6MDU6 NTlaIERFQlVHIGFwcHJvdmVkX3VzYWdlID0gU1NMIFNlcnZlcjxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCDCoCDCoCZndDvCoCDCoCDCoGludGVuZGVkX3VzYWdlID0gU1NMIFNlcnZlcjxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoDIwMTctMTEtMTVUMTM6MDU6NTlaIERF QlVHIGNlcnQgdmFsaWQgVHJ1ZSBmb3I8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmcXVv dDtDTj08YSBocmVmPSJodHRwOi8vaXBhMS5teS5uZXQiIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0 PSJfYmxhbmsiPmlwYTEubXkubmV0PC9hPiAmbHQ7PGEgaHJlZj0iaHR0cDovL2lwYTEubXkubmV0 IiByZWw9Im5vcmVmZXJyZXIiIHRhcmdldD0iX2JsYW5rIj5odHRwOi8vaXBhMS5teS5uZXQ8L2E+ Jmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCZsdDs8YSBocmVm PSJodHRwOi8vaXBhMS5teS5uZXQiIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsiPmh0 dHA6Ly9pcGExLm15Lm5ldDwvYT4mZ3Q7LE89PGEgaHJlZj0iaHR0cDovL1RIT01BQy5ORVQiIHJl bD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsiPlRIT01BQy48d2JyPk5FVDwvYT4gJmx0Ozxh IGhyZWY9Imh0dHA6Ly9USE9NQUMuTkVUIiByZWw9Im5vcmVmZXJyZXIiIHRhcmdldD0iX2JsYW5r Ij5odHRwOi8vVEhPTUFDLk5FVDwvYT4mZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKg Jmx0OzxhIGhyZWY9Imh0dHA6Ly9USE9NQUMuTkVUIiByZWw9Im5vcmVmZXJyZXIiIHRhcmdldD0i X2JsYW5rIj5odHRwOi8vVEhPTUFDLk5FVDwvYT4mZ3Q7JnF1b3Q7PGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgMjAxNy0xMS0xNVQxMzowNTo1OVogREVCVUcgaGFuZHNo YWtlIGNvbXBsZXRlLCBwZWVyID08YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBJUEFERFJF U1M8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAyMDE3LTExLTE1VDEz OjA1OjU5WiBERUJVRyBQcm90b2NvbDogVExTMS4yPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKg IMKgJmd0O8KgIMKgIMKgMjAxNy0xMS0xNVQxMzowNTo1OVogREVCVUcgQ2lwaGVyOjxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCDCoCDCoFRMU19SU0FfV0lUSF9BRVNfMTI4X0NCQ19TSEE8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAyMDE3LTExLTE1VDEzOjA1OjU5WiBE RUJVRyByZXNwb25zZSBzdGF0dXMgNTAwPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0 O8KgIMKgIMKgMjAxNy0xMS0xNVQxMzowNTo1OVogREVCVUcgcmVzcG9uc2UgaGVhZGVyczxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoHsmIzM5O2NvbnRlbnQtbGVuZ3RoJiMzOTs6PGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgJiMzOTsyMjkyJiMzOTssICYjMzk7 Y29udGVudC1sYW5ndWFnZSYjMzk7OiAmIzM5O2VuJiMzOTssICYjMzk7c2VydmVyJiMzOTs6PGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJiMzOTtBcGFjaGUtQ295b3RlLzEuMSYjMzk7LDxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCYjMzk7Y29ubmVjdGlvbiYj Mzk7OiAmIzM5O2Nsb3NlJiMzOTssICYjMzk7ZGF0ZSYjMzk7OiAmIzM5O1dlZCwgMTUgTm92IDIw MTc8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAxMzowNTo1OSBHTVQmIzM5Oyw8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmIzM5O2NvbnRlbnQtdHlwZSYjMzk7 OiAmIzM5O3RleHQvaHRtbDtjaGFyc2V0PXV0Zi04JiMzOTt9PGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgIMKgIMKgJmd0O8KgIMKgIMKgMjAxNy0xMS0xNVQxMzowNTo1OVogREVCVUcgcmVzcG9uc2Ug Ym9keSAmIzM5OyZsdDshRE9DVFlQRTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvC oCDCoCDCoGh0bWwmZ3Q7Jmx0O2h0bWwmZ3Q7Jmx0O2hlYWQmZ3Q7Jmx0O3RpdGxlJmd0O0FwYWNo ZSBUb21jYXQvOC4wLjQ2IChVYnVudHUpPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgLSBF cnJvcjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoHJlcG9ydCZsdDsv dGl0bGUmZ3Q7Jmx0O3N0eWxlIHR5cGU9JnF1b3Q7dGV4dC9jc3MmcXVvdDsmZ3Q7SDE8YnI+DQom Z3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKg IHtmb250LWZhbWlseTpUYWhvbWEsQXJpYWwsPHdicj5zYW5zLXNlcmlmO2NvbG9yOndoaXRlOzx3 YnI+YmFja2dyb3VuZC1jb2xvcjojNTI1RDc2O2ZvbnQtPHdicj5zaXplOjIycHg7fTxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoEgyPGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCB7Zm9udC1mYW1pbHk6 VGFob21hLEFyaWFsLDx3YnI+c2Fucy1zZXJpZjtjb2xvcjp3aGl0ZTs8d2JyPmJhY2tncm91bmQt Y29sb3I6IzUyNUQ3Njtmb250LTx3YnI+c2l6ZToxNnB4O308YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAgwqAgwqAmZ3Q7wqAgwqAgwqBIMzxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAge2ZvbnQtZmFtaWx5OlRhaG9tYSxBcmlhbCw8 d2JyPnNhbnMtc2VyaWY7Y29sb3I6d2hpdGU7PHdicj5iYWNrZ3JvdW5kLWNvbG9yOiM1MjVENzY7 Zm9udC08d2JyPnNpemU6MTRweDt9PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8Kg IMKgIMKgQk9EWTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAgwqAgwqAge2ZvbnQtZmFtaWx5OlRhaG9tYSxBcmlhbCw8d2JyPnNhbnMtc2Vy aWY7Y29sb3I6YmxhY2s7PHdicj5iYWNrZ3JvdW5kLWNvbG9yOndoaXRlO308YnI+DQomZ3Q7wqAg wqAgwqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqBCPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKg IMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCB7Zm9udC1mYW1pbHk6VGFob21h LEFyaWFsLDx3YnI+c2Fucy1zZXJpZjtjb2xvcjp3aGl0ZTs8d2JyPmJhY2tncm91bmQtY29sb3I6 IzUyNUQ3Njt9PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgUDxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAg wqAge2ZvbnQtZmFtaWx5OlRhaG9tYSxBcmlhbCw8d2JyPnNhbnMtc2VyaWY7YmFja2dyb3VuZDp3 aGl0ZTs8d2JyPmNvbG9yOmJsYWNrO2ZvbnQtc2l6ZToxMnB4O31BPGJyPg0KJmd0O8KgIMKgIMKg IMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKge2NvbG9yIDogYmxhY2s7fUEubmFtZSB7Y29sb3IgOiBi bGFjazt9LmxpbmUge2hlaWdodDogMXB4Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZn dDvCoCDCoCDCoGJhY2tncm91bmQtY29sb3I6ICM1MjVENzY7IGJvcmRlcjogbm9uZTt9Jmx0Oy9z dHlsZSZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAmbHQ7L2hl YWQmZ3Q7Jmx0O2JvZHkmZ3Q7Jmx0O2gxJmd0O0hUVFAgU3RhdHVzIDUwMCAtIFN1YnN5c3RlbTxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoHVuYXZhaWxhYmxlJmx0Oy9oMSZndDsmbHQ7ZGl2 PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgY2xhc3M9JnF1b3Q7bGlu ZSZxdW90OyZndDsmbHQ7L2RpdiZndDsmbHQ7cCZndDsmbHQ7YiZndDt0eXBlJmx0Ozx3YnI+L2Im Z3Q7IEV4Y2VwdGlvbjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoHJl cG9ydCZsdDsvcCZndDsmbHQ7cCZndDsmbHQ7YiZndDttZXNzYWdlJmx0Oy9iJmd0OyAmbHQ7dSZn dDtTdWJzeXN0ZW08YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqB1bmF2 YWlsYWJsZSZsdDsvdSZndDsmbHQ7L3AmZ3Q7Jmx0O3AmZ3Q7Jmx0O2ImZ3Q7PHdicj5kZXNjcmlw dGlvbiZsdDsvYiZndDsgJmx0O3UmZ3Q7VGhlIHNlcnZlcjxicj4NCiZndDvCoCDCoCDCoCDCoCDC oCDCoCDCoGVuY291bnRlcmVkPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIMKg IMKgYW4gaW50ZXJuYWwgZXJyb3IgdGhhdCBwcmV2ZW50ZWQgaXQgZnJvbSBmdWxmaWxsaW5nIHRo aXM8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgIMKgIMKgIHJlcXVlc3QuJmx0Oy91Jmd0OyZsdDsvcCZndDsmbHQ7cCZndDsmbHQ7YiZndDs8 d2JyPmV4Y2VwdGlvbiZsdDsvYiZndDsmbHQ7L3AmZ3Q7Jmx0O3ByZSZndDs8YSBocmVmPSJodHRw Oi8vamF2YXgud3MucnMiIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsiPmphdmF4Ljx3 YnI+d3MucnM8L2E+PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmx0OzxhIGhyZWY9Imh0 dHA6Ly9qYXZheC53cy5ycyIgcmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+aHR0cDov L2phdmF4LndzLnJzPC9hPiZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7wqAg wqAgwqAmbHQ7PGEgaHJlZj0iaHR0cDovL3dzLnJzIiByZWw9Im5vcmVmZXJyZXIiIHRhcmdldD0i X2JsYW5rIj5odHRwOi8vd3MucnM8L2E+Jmd0Oy48d2JyPlNlcnZpY2VVbmF2YWlsYWJsZUV4Y2Vw dGlvbjogU3Vic3lzdGVtPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCDCoCDCoCB1bmF2YWlsYWJsZVxuXHRjb20ubmV0c2NhcGUuPHdicj5j bXMudG9tY2F0LlByb3h5UmVhbG0uPHdicj5maW5kU2VjdXJpdHlDb25zdHJhaW50cyg8d2JyPlBy b3h5UmVhbG0uamF2YToxMzgpXG5cdG9yZy48d2JyPmFwYWNoZS5jYXRhbGluYS5hdXRoZW50aWNh dG9yLjx3YnI+QXV0aGVudGljYXRvckJhc2UuaW52b2tlKDx3YnI+QXV0aGVudGljYXRvckJhc2Uu amF2YTo0OTgpXG5cPHdicj50b3JnLmFwYWNoZS5jYXRhbGluYS52YWx2ZXMuPHdicj5FcnJvclJl cG9ydFZhbHZlLmludm9rZSg8d2JyPkVycm9yUmVwb3J0VmFsdmUuamF2YTo3OSlcblw8d2JyPnRv cmcuYXBhY2hlLmNhdGFsaW5hLnZhbHZlcy48d2JyPkFic3RyYWN0QWNjZXNzTG9nVmFsdmUuaW52 b2tlKDx3YnI+QWJzdHJhY3RBY2Nlc3NMb2dWYWx2ZS5qYXZhOjx3YnI+NjIwKVxuXHRvcmcuYXBh Y2hlLmNhdGFsaW5hLjx3YnI+Y29ubmVjdG9yLkNveW90ZUFkYXB0ZXIuPHdicj5zZXJ2aWNlKENv eW90ZUFkYXB0ZXIuamF2YTo8d2JyPjUwMilcblx0b3JnLmFwYWNoZS5jb3lvdGUuPHdicj5odHRw MTEuPHdicj5BYnN0cmFjdEh0dHAxMVByb2Nlc3Nvci48d2JyPnByb2Nlc3MoPHdicj5BYnN0cmFj dEh0dHAxMVByb2Nlc3Nvci5qYXZhOjx3YnI+MTEzMilcblx0b3JnLmFwYWNoZS5jb3lvdGUuPHdi cj5BYnN0cmFjdFByb3RvY29sJDx3YnI+QWJzdHJhY3RDb25uZWN0aW9uSGFuZGxlci48d2JyPnBy b2Nlc3MoQWJzdHJhY3RQcm90b2NvbC5qYXZhOjx3YnI+Njg0KVxuXDxhIGhyZWY9Imh0dHA6Ly90 b3JnLmFwYWNoZS50b21jYXQudXRpbC5uZXQiIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxh bmsiPnRvcmcuYXBhY2hlLnRvbWNhdC48d2JyPnV0aWwubmV0PC9hPjxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCDCoCDCoCZsdDs8YSBocmVmPSJodHRwOi8vdG9yZy5hcGFjaGUudG9tY2F0LnV0aWwu bmV0IiByZWw9Im5vcmVmZXJyZXIiIHRhcmdldD0iX2JsYW5rIj5odHRwOi8vdG9yZy5hcGFjaGUu dG9tY2F0Ljx3YnI+dXRpbC5uZXQ8L2E+Jmd0Oy5KSW9FbmRwb2ludCQ8d2JyPlNvY2tldFByb2Nl c3Nvci5ydW4oPHdicj5KSW9FbmRwb2ludC5qYXZhOjI4Mylcblx0amF2YS48d2JyPnV0aWwuY29u Y3VycmVudC48d2JyPlRocmVhZFBvb2xFeGVjdXRvci5ydW5Xb3JrZXIoPHdicj5UaHJlYWRQb29s RXhlY3V0b3IuamF2YToxMTQ5KVw8d2JyPm5cdGphdmEudXRpbC5jb25jdXJyZW50Ljx3YnI+VGhy ZWFkUG9vbEV4ZWN1dG9yJFdvcmtlci5ydW4oPHdicj5UaHJlYWRQb29sRXhlY3V0b3IuamF2YTo2 MjQpXDx3YnI+blx0b3JnLmFwYWNoZS50b21jYXQudXRpbC48d2JyPnRocmVhZHMuVGFza1RocmVh ZCQ8d2JyPldyYXBwaW5nUnVubmFibGUucnVuKDx3YnI+VGFza1RocmVhZC5qYXZhOjYxKVxuXHRq YXZhLjx3YnI+bGFuZy5UaHJlYWQucnVuKFRocmVhZC5qYXZhOjx3YnI+NzQ4KVxuJmx0Oy9wcmUm Z3Q7Jmx0O3AmZ3Q7Jmx0O2ImZ3Q7bm90ZSZsdDsvYiZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAgwqAgwqAmZ3Q7wqAgwqAgwqAmbHQ7dSZndDtUaGUgZnVsbCBzdGFjayB0cmFjZSBvZiB0aGUg cm9vdCBjYXVzZSBpcyBhdmFpbGFibGU8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBpbiB0 aGUgQXBhY2hlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgVG9tY2F0 LzguMC40NiAoVWJ1bnR1KSBsb2dzLiZsdDsvdSZndDsmbHQ7L3AmZ3Q7Jmx0O2hyPGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgIMKgIMKgY2xhc3M9JnF1b3Q7bGluZSZxdW90OyZndDsmbHQ7aDMmZ3Q7 QXBhY2hlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgVG9tY2F0Lzgu MC40NiAoVWJ1bnR1KSZsdDsvaDMmZ3Q7Jmx0Oy9ib2R5Jmd0OyZsdDsvaHRtbCZndDsmIzM5Ozxi cj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoDIwMTctMTEtMTVUMTM6MDU6 NTlaIEVSUk9SIElQQSBzZXJ2ZXIgdXBncmFkZSBmYWlsZWQ6PGJyPg0KJmd0O8KgIMKgIMKgIMKg IMKgIMKgIMKgSW5zcGVjdDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDC oC92YXIvbG9nL2lwYXVwZ3JhZGUubG9nIGFuZCBydW4gY29tbWFuZDxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCDCoCDCoGlwYS1zZXJ2ZXItdXBncmFkZSBtYW51YWxseS48YnI+DQomZ3Q7wqAgwqAg wqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAyMDE3LTExLTE1VDEzOjA1OjU5WiBERUJVR8KgIMKg RmlsZTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqAgwqAgwqAgJnF1b3Q7L3Vzci9saWIvcHl0aG9uMi43L2Rpc3QtPHdicj5wYWNrYWdlcy9p cGFweXRob24vYWRtaW50b29sLjx3YnI+cHkmcXVvdDssPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg IMKgIMKgbGluZSAxNzIsPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKg aW4gZXhlY3V0ZTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCDCoCDC oHJldHVybl92YWx1ZSA9IHNlbGYucnVuKCk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAm Z3Q7wqAgwqAgwqAgwqBGaWxlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCAmcXVvdDsvdXNyL2xpYi9weXRob24yLjcvZGlzdC08 d2JyPnBhY2thZ2VzL2lwYXNlcnZlci9pbnN0YWxsLzx3YnI+aXBhX3NlcnZlcl91cGdyYWRlLnB5 JnF1b3Q7LDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoGxpbmUgNDYs IGluIHJ1bjxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCDCoCDCoHNl cnZlci51cGdyYWRlKCk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAg wqBGaWxlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCDCoCDCoCAmcXVvdDsvdXNyL2xpYi9weXRob24yLjcvZGlzdC08d2JyPnBhY2thZ2Vz L2lwYXNlcnZlci9pbnN0YWxsLzx3YnI+c2VydmVyL3VwZ3JhZGUucHkmcXVvdDssPGJyPg0KJmd0 O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgbGluZSAxODc4LCBpbiB1cGdyYWRlPGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgIMKgIMKgdXBncmFkZV9jb25m aWd1cmF0aW9uKCk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAgwqBG aWxlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZndDvCoCDCoCDCoCDC oCDCoCDCoCDCoCAmcXVvdDsvdXNyL2xpYi9weXRob24yLjcvZGlzdC08d2JyPnBhY2thZ2VzL2lw YXNlcnZlci9pbnN0YWxsLzx3YnI+c2VydmVyL3VwZ3JhZGUucHkmcXVvdDssPGJyPg0KJmd0O8Kg IMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgbGluZSAxNzk3LCBpbiB1cGdyYWRlX2NvbmZp Z3VyYXRpb248YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAgwqAgwqBj YV9lbmFibGVfbGRhcF9wcm9maWxlXzx3YnI+c3Vic3lzdGVtKGNhKTxicj4NCiZndDvCoCDCoCDC oCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCDCoEZpbGU8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAg wqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgICZxdW90Oy91c3IvbGliL3B5 dGhvbjIuNy9kaXN0LTx3YnI+cGFja2FnZXMvaXBhc2VydmVyL2luc3RhbGwvPHdicj5zZXJ2ZXIv dXBncmFkZS5weSZxdW90Oyw8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7wqAgwqAg wqBsaW5lIDM0NywgaW4gY2FfZW5hYmxlX2xkYXBfcHJvZmlsZV88d2JyPnN1YnN5c3RlbTxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoCDCoCDCoGNhaW5zdGFuY2UubWln cmF0ZV9wcm9maWxlc188d2JyPnRvX2xkYXAoKTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDC oCZndDvCoCDCoCDCoCDCoEZpbGU8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7PGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgICZxdW90Oy91c3IvbGliL3B5dGhvbjIuNy9kaXN0 LTx3YnI+cGFja2FnZXMvaXBhc2VydmVyL2luc3RhbGwvPHdicj5jYWluc3RhbmNlLnB5JnF1b3Q7 LDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDvCoCDCoCDCoGxpbmUgMTk4MSwgaW4g bWlncmF0ZV9wcm9maWxlc190b19sZGFwPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0 O8KgIMKgIMKgIMKgIMKgX2NyZWF0ZV9kb2d0YWdfcHJvZmlsZSg8d2JyPnByb2ZpbGVfaWQsIHBy b2ZpbGVfZGF0YSw8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqBvdmVyd3JpdGU9RmFsc2Up PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgIMKgRmlsZTxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAg JnF1b3Q7L3Vzci9saWIvcHl0aG9uMi43L2Rpc3QtPHdicj5wYWNrYWdlcy9pcGFzZXJ2ZXIvaW5z dGFsbC88d2JyPmNhaW5zdGFuY2UucHkmcXVvdDssPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKg IMKgJmd0O8KgIMKgIMKgbGluZSAxOTg3LCBpbiBfY3JlYXRlX2RvZ3RhZ19wcm9maWxlPGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgIMKgIMKgd2l0aCBhcGkuQmFja2Vu ZC5yYV9jZXJ0cHJvZmlsZSBhcyBwcm9maWxlX2FwaTo8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAg wqAgwqAmZ3Q7wqAgwqAgwqAgwqBGaWxlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0 Ozxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCAmcXVvdDsvdXNyL2xpYi9weXRob24yLjcv ZGlzdC08d2JyPnBhY2thZ2VzL2lwYXNlcnZlci9wbHVnaW5zLzx3YnI+ZG9ndGFnLnB5JnF1b3Q7 LDxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoGxpbmU8YnI+DQomZ3Q7wqAgwqAgwqAgwqAg wqAgwqAgwqAmZ3Q7wqAgwqAgwqAxMjk0LCBpbiBfX2VudGVyX188YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqAgwqAgwqAmZ3Q7wqAgwqAgwqAgwqAgwqByYWlzZSBlcnJvcnMuUmVtb3RlUmV0cmlldmVF cnJvcig8d2JyPnJlYXNvbj1fKCYjMzk7RmFpbGVkIHRvPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg IMKgIMKgJmd0O8KgIMKgIMKgYXV0aGVudGljYXRlIHRvIENBIFJFU1QgQVBJJiMzOTspKTxicj4N CiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAg wqAmZ3Q7wqAgwqAgwqAyMDE3LTExLTE1VDEzOjA1OjU5WiBERUJVRyBUaGUgaXBhLXNlcnZlci11 cGdyYWRlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgY29tbWFuZCBmYWlsZWQsPGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgZXhjZXB0aW9uOiBSZW1vdGVSZXRy aWV2ZUVycm9yOiBGYWlsZWQgdG8gYXV0aGVudGljYXRlPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKg IMKgIMKgdG8gQ0EgUkVTVCBBUEk8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7wqAg wqAgwqAyMDE3LTExLTE1VDEzOjA1OjU5WiBFUlJPUiBVbmV4cGVjdGVkIGVycm9yIC0gc2VlPGJy Pg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIMKgIMKgL3Zhci9sb2cvaXBhdXBncmFk ZS5sb2cgZm9yIGRldGFpbHM6PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0O8KgIMKg IMKgUmVtb3RlUmV0cmlldmVFcnJvcjogRmFpbGVkIHRvIGF1dGhlbnRpY2F0ZSB0byBDQSBSRVNU IEFQSTxicj4NCiZndDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAg wqAgwqAgwqAgwqAmZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZn dDvCoCDCoCDCoCDCoCDCoCDCoCDCoCZndDs8YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAm Z3Q7IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzx3YnI+X19fX19fX19fX19fX19fX188 YnI+DQomZ3Q7wqAgwqAgwqAgwqAgwqAgwqAgwqAmZ3Q7IEZyZWVJUEEtdXNlcnMgbWFpbGluZyBs aXN0IC0tPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgPGEgaHJlZj0ibWFpbHRvOmZyZWVp cGEtdXNlcnNAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZyI+ZnJlZWlwYS11c2Vyc0BsaXN0cy48d2Jy PmZlZG9yYWhvc3RlZC5vcmc8L2E+PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmx0O21h aWx0bzo8YSBocmVmPSJtYWlsdG86ZnJlZWlwYS11c2Vyc0BsaXN0cy5mZWRvcmFob3N0ZWQub3Jn Ij5mcmVlaXBhLXVzZXJzQGxpc3RzLjx3YnI+ZmVkb3JhaG9zdGVkLm9yZzwvYT4mZ3Q7PGJyPg0K Jmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0OyBUbyB1bnN1YnNjcmliZSBzZW5kIGFuIGVtYWls IHRvPGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgPGEgaHJlZj0ibWFpbHRvOmZyZWVpcGEt dXNlcnMtbGVhdmVAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZyI+ZnJlZWlwYS11c2Vycy1sZWF2ZUBs aXN0cy48d2JyPmZlZG9yYWhvc3RlZC5vcmc8L2E+PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKg IMKgJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86ZnJlZWlwYS11c2Vycy1sZWF2ZUBsaXN0cy5m ZWRvcmFob3N0ZWQub3JnIj5mcmVlaXBhLXVzZXJzLWxlYXZlQDx3YnI+bGlzdHMuZmVkb3JhaG9z dGVkLm9yZzwvYT4mZ3Q7PGJyPg0KJmd0O8KgIMKgIMKgIMKgIMKgIMKgIMKgJmd0Ozxicj4NCiZn dDs8YnI+DQomZ3Q7PGJyPg0KJmd0Ozxicj4NCiZndDs8YnI+DQo8YnI+DQo8L2Jsb2NrcXVvdGU+ PC9kaXY+PC9kaXY+DQo= --===============5475665980130775077==-- From hedrick at rutgers.edu Tue Nov 28 19:45:46 2017 Content-Type: multipart/mixed; boundary="===============0029002503263963703==" MIME-Version: 1.0 From: Charles Hedrick To: freeipa-users at lists.fedorahosted.org Subject: [Freeipa-users] Re: upgrade to ubuntu 17.10 fails Date: Tue, 28 Nov 2017 19:44:47 +0000 Message-ID: <5CCA6885-9DAA-4260-B314-2BDBFF9E5AA9@rutgers.edu> In-Reply-To: CADq_JGphwrPEaiRV7G+-tGyhzzk1O7MMbTfR6aWsUd2_asEL6g@mail.gmail.com --===============0029002503263963703== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable We successfully ran on Centos 7.3 with 4.4.4 and 4.5, the 4.5 having been i= nstalled later. The first step in installing the replica was that it automa= tically upgraded itself to the newest release, so it happened without givin= g us any choice. We later upgraded everything to 4.5. 4.5 have generally been OK, though the gssproxy that came with it seems to = have a serious memory leak. We have to watch it and restart it when it gets= too big. On Nov 21, 2017, at 6:15 AM, David Harvey via FreeIPA-users > wr= ote: Anyone out there with experience of whether or not adding a replica of more= recent version (4.4.4 and 389 dir 1.3.7.5-1 up from 4.4.3 with 389 dir 1.3= .5.15-2) would impact the existing servers in terms of schema or similar? I'm still trying to find a safe way to upgrade safely without going past a = point of no return... --===============0029002503263963703== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGh0bWw+CjxoZWFkPgo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9InRl eHQvaHRtbDsgY2hhcnNldD11cy1hc2NpaSI+CjwvaGVhZD4KPGJvZHkgc3R5bGU9IndvcmQtd3Jh cDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyBsaW5lLWJyZWFrOiBhZnRl ci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPgpXZSBzdWNjZXNzZnVsbHkgcmFuIG9uIENlbnRvcyA3 LjMgd2l0aCA0LjQuNCBhbmQgNC41LCB0aGUgNC41IGhhdmluZyBiZWVuIGluc3RhbGxlZCBsYXRl ci4gVGhlIGZpcnN0IHN0ZXAgaW4gaW5zdGFsbGluZyB0aGUgcmVwbGljYSB3YXMgdGhhdCBpdCBh dXRvbWF0aWNhbGx5IHVwZ3JhZGVkIGl0c2VsZiB0byB0aGUgbmV3ZXN0IHJlbGVhc2UsIHNvIGl0 IGhhcHBlbmVkIHdpdGhvdXQgZ2l2aW5nIHVzIGFueSBjaG9pY2UuIFdlIGxhdGVyIHVwZ3JhZGVk CiBldmVyeXRoaW5nIHRvIDQuNS4KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+CjwvZGl2Pgo8 ZGl2IGNsYXNzPSIiPjQuNSBoYXZlIGdlbmVyYWxseSBiZWVuIE9LLCB0aG91Z2ggdGhlIGdzc3By b3h5IHRoYXQgY2FtZSB3aXRoIGl0IHNlZW1zIHRvIGhhdmUgYSBzZXJpb3VzIG1lbW9yeSBsZWFr LiBXZSBoYXZlIHRvIHdhdGNoIGl0IGFuZCByZXN0YXJ0IGl0IHdoZW4gaXQgZ2V0cyB0b28gYmln LjxiciBjbGFzcz0iIj4KPGRpdj48YnIgY2xhc3M9IiI+CjxibG9ja3F1b3RlIHR5cGU9ImNpdGUi IGNsYXNzPSIiPgo8ZGl2IGNsYXNzPSIiPk9uIE5vdiAyMSwgMjAxNywgYXQgNjoxNSBBTSwgRGF2 aWQgSGFydmV5IHZpYSBGcmVlSVBBLXVzZXJzICZsdDs8YSBocmVmPSJtYWlsdG86ZnJlZWlwYS11 c2Vyc0BsaXN0cy5mZWRvcmFob3N0ZWQub3JnIiBjbGFzcz0iIj5mcmVlaXBhLXVzZXJzQGxpc3Rz LmZlZG9yYWhvc3RlZC5vcmc8L2E+Jmd0OyB3cm90ZTo8L2Rpdj4KPGJyIGNsYXNzPSJBcHBsZS1p bnRlcmNoYW5nZS1uZXdsaW5lIj4KPGRpdiBjbGFzcz0iIj4KPGRpdiBzdHlsZT0iZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsiIGNsYXNzPSIiPgpBbnlvbmUgb3V0IHRoZXJlIHdp dGggZXhwZXJpZW5jZSBvZiB3aGV0aGVyIG9yIG5vdCBhZGRpbmcgYSByZXBsaWNhIG9mIG1vcmUg cmVjZW50IHZlcnNpb24gKDQuNC40IGFuZCAzODkgZGlyJm5ic3A7MS4zLjcuNS0xIHVwIGZyb20g NC40LjMgd2l0aCAzODkgZGlyJm5ic3A7MS4zLjUuMTUtMikmbmJzcDsgd291bGQgaW1wYWN0IHRo ZSBleGlzdGluZyBzZXJ2ZXJzIGluIHRlcm1zIG9mIHNjaGVtYSBvciBzaW1pbGFyPzwvZGl2Pgo8 ZGl2IHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+ CkknbSBzdGlsbCB0cnlpbmcgdG8gZmluZCBhIHNhZmUgd2F5IHRvIHVwZ3JhZGUgc2FmZWx5IHdp dGhvdXQgZ29pbmcgcGFzdCBhIHBvaW50IG9mIG5vIHJldHVybi4uLjwvZGl2Pgo8L2Rpdj4KPC9i bG9ja3F1b3RlPgo8L2Rpdj4KPGJyIGNsYXNzPSIiPgo8L2Rpdj4KPC9ib2R5Pgo8L2h0bWw+Cg== --===============0029002503263963703==-- From freeipa at 0xc0dedbad.com Tue Nov 28 20:59:40 2017 Content-Type: multipart/mixed; boundary="===============7124469834027809955==" MIME-Version: 1.0 From: Peter Fern To: freeipa-users at lists.fedorahosted.org Subject: [Freeipa-users] Re: upgrade to ubuntu 17.10 fails Date: Wed, 29 Nov 2017 07:58:34 +1100 Message-ID: <114e9a53-dbc1-0b41-4b22-51d2c4aa979f@0xc0dedbad.com> In-Reply-To: CADq_JGo=tk8g+Zc=DOv+HXd0ahO_10NrGyo6DzwxNTODhm=gew@mail.gmail.com --===============7124469834027809955== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable On 23/11/17 05:34, David Harvey via FreeIPA-users wrote: > Not sure why tomcat is more resilient when launched as root, but the > pki seems to work ok at issuing certs after the above and a reboot for > good measure. This sounds like there are broken permissions in the current Ubuntu packages.=C2=A0 You should be aware that last time I checked, FreeIPA on Ubuntu was subtly yet severely broken, mostly due to the NSS libs missing PEM support, which will stop your CA from renewing, amongst other things. Does anyone know what the state of packaging for deb distros is currently?=C2=A0 Now that the OpenSSL migration is complete(?), the barriers to functional packages should be removed, but it looks like that only happened in 4.5, and it appears only 4.4 is packaged, which is likely still broken? --===============7124469834027809955==-- From davidcharvey at googlemail.com Fri Dec 1 12:28:02 2017 Content-Type: multipart/mixed; boundary="===============0531081330963209054==" MIME-Version: 1.0 From: David Harvey To: freeipa-users at lists.fedorahosted.org Subject: [Freeipa-users] Re: upgrade to ubuntu 17.10 fails Date: Fri, 01 Dec 2017 12:27:34 +0000 Message-ID: In-Reply-To: 114e9a53-dbc1-0b41-4b22-51d2c4aa979f@0xc0dedbad.com --===============0531081330963209054== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable hi Peter, Not a full answer to your questions but from my experience: Xenial: Worked, except OTP functionality Zesty: Worked except for DNS Artful: Seems fully functional and stable on the fresh installed replica, my upgraded from Zesty rig (with the workarounds noted earlier in thread) Still has pki-tomcat bombing fairly frequently. Bionic: I have high hopes for given LTS.. Currently showing same package versions 4.4.4 as Artful Most of them required some cajoling during install or upgrade due to broken installer components (like directories not being created in one case, /etc/pki/pki.version confusing postinstall in another), but most of these behaviours were captured as bugs too. It feels very close to being something that can be reliably deployed, so I don't think it needs a huge amount more TLC to make it more of a pleasure to install ;) Cheers, David On 28 November 2017 at 20:58, Peter Fern via FreeIPA-users < freeipa-users(a)lists.fedorahosted.org> wrote: > On 23/11/17 05:34, David Harvey via FreeIPA-users wrote: > > Not sure why tomcat is more resilient when launched as root, but the > > pki seems to work ok at issuing certs after the above and a reboot for > > good measure. > > This sounds like there are broken permissions in the current Ubuntu > packages. You should be aware that last time I checked, FreeIPA on > Ubuntu was subtly yet severely broken, mostly due to the NSS libs > missing PEM support, which will stop your CA from renewing, amongst > other things. > > Does anyone know what the state of packaging for deb distros is > currently? Now that the OpenSSL migration is complete(?), the barriers > to functional packages should be removed, but it looks like that only > happened in 4.5, and it appears only 4.4 is packaged, which is likely > still broken? > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.= org > --===============0531081330963209054== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGRpdiBkaXI9Imx0ciI+PGRpdj5oaSBQZXRlciw8L2Rpdj48ZGl2Pjxicj48L2Rpdj5Ob3QgYSBm dWxsIGFuc3dlciB0byB5b3VyIHF1ZXN0aW9ucyBidXQgZnJvbSBteSBleHBlcmllbmNlOjxkaXY+ PGJyPjwvZGl2PjxkaXY+WGVuaWFsOiBXb3JrZWQsIGV4Y2VwdCBPVFAgZnVuY3Rpb25hbGl0eTwv ZGl2PjxkaXY+WmVzdHk6IFdvcmtlZCBleGNlcHQgZm9yIEROUzwvZGl2PjxkaXY+QXJ0ZnVsOiBT ZWVtcyBmdWxseSBmdW5jdGlvbmFsIGFuZCBzdGFibGUgb24gdGhlIGZyZXNoIGluc3RhbGxlZCBy ZXBsaWNhLCBteSB1cGdyYWRlZCBmcm9tIFplc3R5IHJpZyAod2l0aCB0aGUgd29ya2Fyb3VuZHMg bm90ZWQgZWFybGllciBpbiB0aHJlYWQpIFN0aWxsIGhhcyBwa2ktdG9tY2F0IGJvbWJpbmcgZmFp cmx5IGZyZXF1ZW50bHkuPC9kaXY+PGRpdj5CaW9uaWM6IEkgaGF2ZSBoaWdoIGhvcGVzIGZvciBn aXZlbiBMVFMuLiA8YSBocmVmPSJodHRwczovL3BhY2thZ2VzLnVidW50dS5jb20vc2VhcmNoP2tl eXdvcmRzPWZyZWVpcGEmYW1wO3NlYXJjaG9uPW5hbWVzJmFtcDtzdWl0ZT1iaW9uaWMmYW1wO3Nl Y3Rpb249YWxsIj5DdXJyZW50bHkgc2hvd2luZyBzYW1lIHBhY2thZ2UgdmVyc2lvbnM8L2E+IDQu NC40IGFzIEFydGZ1bDwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+TW9zdCBvZiB0aGVtIHJlcXVp cmVkIHNvbWUgY2Fqb2xpbmcgZHVyaW5nIGluc3RhbGwgb3IgdXBncmFkZSBkdWUgdG8gYnJva2Vu IGluc3RhbGxlciBjb21wb25lbnRzIChsaWtlIGRpcmVjdG9yaWVzIG5vdCBiZWluZyBjcmVhdGVk IGluIG9uZSBjYXNlLCAvZXRjL3BraS9wa2kudmVyc2lvbiBjb25mdXNpbmcgcG9zdGluc3RhbGwg aW4gYW5vdGhlciksIGJ1dCBtb3N0IG9mIHRoZXNlIGJlaGF2aW91cnMgd2VyZSBjYXB0dXJlZCBh cyBidWdzIHRvby7CoCBJdCBmZWVscyB2ZXJ5IGNsb3NlIHRvIGJlaW5nIHNvbWV0aGluZyB0aGF0 IGNhbiBiZSByZWxpYWJseSBkZXBsb3llZCwgc28gSSBkb24mIzM5O3QgdGhpbmsgaXQgbmVlZHMg YSBodWdlIGFtb3VudCBtb3JlIFRMQyB0byBtYWtlIGl0IG1vcmUgb2YgYSBwbGVhc3VyZSB0byBp bnN0YWxsIDspPC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj5DaGVlcnMsPC9kaXY+PGRpdj48YnI+ PC9kaXY+PGRpdj5EYXZpZDwvZGl2PjwvZGl2PjxkaXYgY2xhc3M9ImdtYWlsX2V4dHJhIj48YnI+ PGRpdiBjbGFzcz0iZ21haWxfcXVvdGUiPk9uIDI4IE5vdmVtYmVyIDIwMTcgYXQgMjA6NTgsIFBl dGVyIEZlcm4gdmlhIEZyZWVJUEEtdXNlcnMgPHNwYW4gZGlyPSJsdHIiPiZsdDs8YSBocmVmPSJt YWlsdG86ZnJlZWlwYS11c2Vyc0BsaXN0cy5mZWRvcmFob3N0ZWQub3JnIiB0YXJnZXQ9Il9ibGFu ayI+ZnJlZWlwYS11c2Vyc0BsaXN0cy5mZWRvcmFob3N0ZWQub3JnPC9hPiZndDs8L3NwYW4+IHdy b3RlOjxicj48YmxvY2txdW90ZSBjbGFzcz0iZ21haWxfcXVvdGUiIHN0eWxlPSJtYXJnaW46MCAw IDAgLjhleDtib3JkZXItbGVmdDoxcHggI2NjYyBzb2xpZDtwYWRkaW5nLWxlZnQ6MWV4Ij48c3Bh biBjbGFzcz0iIj5PbiAyMy8xMS8xNyAwNTozNCwgRGF2aWQgSGFydmV5IHZpYSBGcmVlSVBBLXVz ZXJzIHdyb3RlOjxicj4KJmd0OyBOb3Qgc3VyZSB3aHkgdG9tY2F0IGlzIG1vcmUgcmVzaWxpZW50 IHdoZW4gbGF1bmNoZWQgYXMgcm9vdCwgYnV0IHRoZTxicj4KJmd0OyBwa2kgc2VlbXMgdG8gd29y ayBvayBhdCBpc3N1aW5nIGNlcnRzIGFmdGVyIHRoZSBhYm92ZSBhbmQgYSByZWJvb3QgZm9yPGJy PgomZ3Q7IGdvb2QgbWVhc3VyZS48YnI+Cjxicj4KPC9zcGFuPlRoaXMgc291bmRzIGxpa2UgdGhl cmUgYXJlIGJyb2tlbiBwZXJtaXNzaW9ucyBpbiB0aGUgY3VycmVudCBVYnVudHU8YnI+CnBhY2th Z2VzLsKgIFlvdSBzaG91bGQgYmUgYXdhcmUgdGhhdCBsYXN0IHRpbWUgSSBjaGVja2VkLCBGcmVl SVBBIG9uPGJyPgpVYnVudHUgd2FzIHN1YnRseSB5ZXQgc2V2ZXJlbHkgYnJva2VuLCBtb3N0bHkg ZHVlIHRvIHRoZSBOU1MgbGliczxicj4KbWlzc2luZyBQRU0gc3VwcG9ydCwgd2hpY2ggd2lsbCBz dG9wIHlvdXIgQ0EgZnJvbSByZW5ld2luZywgYW1vbmdzdDxicj4Kb3RoZXIgdGhpbmdzLjxicj4K PGJyPgpEb2VzIGFueW9uZSBrbm93IHdoYXQgdGhlIHN0YXRlIG9mIHBhY2thZ2luZyBmb3IgZGVi IGRpc3Ryb3MgaXM8YnI+CmN1cnJlbnRseT/CoCBOb3cgdGhhdCB0aGUgT3BlblNTTCBtaWdyYXRp b24gaXMgY29tcGxldGUoPyksIHRoZSBiYXJyaWVyczxicj4KdG8gZnVuY3Rpb25hbCBwYWNrYWdl cyBzaG91bGQgYmUgcmVtb3ZlZCwgYnV0IGl0IGxvb2tzIGxpa2UgdGhhdCBvbmx5PGJyPgpoYXBw ZW5lZCBpbiA0LjUsIGFuZCBpdCBhcHBlYXJzIG9ubHkgNC40IGlzIHBhY2thZ2VkLCB3aGljaCBp cyBsaWtlbHk8YnI+CnN0aWxsIGJyb2tlbj88YnI+CjxzcGFuIGNsYXNzPSJpbSBIT0VuWmIiPl9f X19fX19fX19fX19fX19fX19fX19fX19fX19fXzx3YnI+X19fX19fX19fX19fX19fX188YnI+CkZy ZWVJUEEtdXNlcnMgbWFpbGluZyBsaXN0IC0tIDxhIGhyZWY9Im1haWx0bzpmcmVlaXBhLXVzZXJz QGxpc3RzLmZlZG9yYWhvc3RlZC5vcmciPmZyZWVpcGEtdXNlcnNAbGlzdHMuPHdicj5mZWRvcmFo b3N0ZWQub3JnPC9hPjxicj4KPC9zcGFuPjxkaXYgY2xhc3M9IkhPRW5aYiI+PGRpdiBjbGFzcz0i aDUiPlRvIHVuc3Vic2NyaWJlIHNlbmQgYW4gZW1haWwgdG8gPGEgaHJlZj0ibWFpbHRvOmZyZWVp cGEtdXNlcnMtbGVhdmVAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZyI+ZnJlZWlwYS11c2Vycy1sZWF2 ZUBsaXN0cy48d2JyPmZlZG9yYWhvc3RlZC5vcmc8L2E+PGJyPgo8L2Rpdj48L2Rpdj48L2Jsb2Nr cXVvdGU+PC9kaXY+PGJyPjwvZGl2Pgo= --===============0531081330963209054==-- From freeipa at 0xc0dedbad.com Fri Dec 1 13:54:17 2017 Content-Type: multipart/mixed; boundary="===============8833651182249829757==" MIME-Version: 1.0 From: Peter Fern To: freeipa-users at lists.fedorahosted.org Subject: [Freeipa-users] Re: upgrade to ubuntu 17.10 fails Date: Sat, 02 Dec 2017 00:53:41 +1100 Message-ID: <27790fe4-60b3-9602-30b5-6ec63e4aaeda@0xc0dedbad.com> In-Reply-To: CADq_JGqu+4zpdOuQ9j-_LRmu2B80LErZgMtGu5apj4deF3QMgA@mail.gmail.com --===============8833651182249829757== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Without installing a system to check, it appears to me that nss-pem is still not packaged for Debian/Ubuntu, which means that certmonger will break on you when it comes time to auto-renew your CAs. I found this out the hard way early this year while running FreeIPA with CA on Ubuntu, and recovery is very painful once your CA certs have expired (actually impossible without compiling nss-pem, which requires some source hacking and compiling of libnss to obtain static libs). Since nss-pem is unlikely to be packaged on Debian/-derivs, it looks to me like until FreeIPA 4.5+ is packaged (where the conversion to OpenSSL has been completed), it is still not safe to run a CA on Ubuntu. On 01/12/17 23:27, David Harvey via FreeIPA-users wrote: > hi Peter, > > Not a full answer to your questions but from my experience: > > Xenial: Worked, except OTP functionality > Zesty: Worked except for DNS > Artful: Seems fully functional and stable on the fresh installed > replica, my upgraded from Zesty rig (with the workarounds noted > earlier in thread) Still has pki-tomcat bombing fairly frequently. > Bionic: I have high hopes for given LTS.. Currently showing same > package versions > > 4.4.4 as Artful > > Most of them required some cajoling during install or upgrade due to > broken installer components (like directories not being created in one > case, /etc/pki/pki.version confusing postinstall in another), but most > of these behaviours were captured as bugs too.=C2=A0 It feels very close = to > being something that can be reliably deployed, so I don't think it > needs a huge amount more TLC to make it more of a pleasure to install ;) > > Cheers, > > David > > On 28 November 2017 at 20:58, Peter Fern via FreeIPA-users > > wrote: > > On 23/11/17 05:34, David Harvey via FreeIPA-users wrote: > > Not sure why tomcat is more resilient when launched as root, but the > > pki seems to work ok at issuing certs after the above and a > reboot for > > good measure. > > This sounds like there are broken permissions in the current Ubuntu > packages.=C2=A0 You should be aware that last time I checked, FreeIPA= on > Ubuntu was subtly yet severely broken, mostly due to the NSS libs > missing PEM support, which will stop your CA from renewing, amongst > other things. > > Does anyone know what the state of packaging for deb distros is > currently?=C2=A0 Now that the OpenSSL migration is complete(?), the > barriers > to functional packages should be removed, but it looks like that only > happened in 4.5, and it appears only 4.4 is packaged, which is likely > still broken? > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > > To unsubscribe send an email to > freeipa-users-leave(a)lists.fedorahosted.org > > > > > > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.= org --===============8833651182249829757== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGh0bWw+CiAgPGhlYWQ+CiAgICA8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRl bnQ9InRleHQvaHRtbDsgY2hhcnNldD11dGYtOCI+CiAgPC9oZWFkPgogIDxib2R5IHRleHQ9IiMw MDAwMDAiIGJnY29sb3I9IiNGRkZGRkYiPgogICAgPGRpdiBjbGFzcz0ibW96LWNpdGUtcHJlZml4 Ij5XaXRob3V0IGluc3RhbGxpbmcgYSBzeXN0ZW0gdG8gY2hlY2ssCiAgICAgIGl0IGFwcGVhcnMg dG8gbWUgdGhhdCBuc3MtcGVtIGlzIHN0aWxsIG5vdCBwYWNrYWdlZCBmb3IKICAgICAgRGViaWFu L1VidW50dSwgd2hpY2ggbWVhbnMgdGhhdCBjZXJ0bW9uZ2VyIHdpbGwgYnJlYWsgb24geW91IHdo ZW4KICAgICAgaXQgY29tZXMgdGltZSB0byBhdXRvLXJlbmV3IHlvdXIgQ0FzLjxicj4KICAgICAg PGJyPgogICAgICBJIGZvdW5kIHRoaXMgb3V0IHRoZSBoYXJkIHdheSBlYXJseSB0aGlzIHllYXIg d2hpbGUgcnVubmluZwogICAgICBGcmVlSVBBIHdpdGggQ0Egb24gVWJ1bnR1LCBhbmQgcmVjb3Zl cnkgaXMgdmVyeSBwYWluZnVsIG9uY2UgeW91cgogICAgICBDQSBjZXJ0cyBoYXZlIGV4cGlyZWQg KGFjdHVhbGx5IGltcG9zc2libGUgd2l0aG91dCBjb21waWxpbmcKICAgICAgbnNzLXBlbSwgd2hp Y2ggcmVxdWlyZXMgc29tZSBzb3VyY2UgaGFja2luZyBhbmQgY29tcGlsaW5nIG9mCiAgICAgIGxp Ym5zcyB0byBvYnRhaW4gc3RhdGljIGxpYnMpLjxicj4KICAgICAgPGJyPgogICAgICBTaW5jZSBu c3MtcGVtIGlzIHVubGlrZWx5IHRvIGJlIHBhY2thZ2VkIG9uIERlYmlhbi8tZGVyaXZzLCBpdAog ICAgICBsb29rcyB0byBtZSBsaWtlIHVudGlsIEZyZWVJUEEgNC41KyBpcyBwYWNrYWdlZCAod2hl cmUgdGhlCiAgICAgIGNvbnZlcnNpb24gdG8gT3BlblNTTCBoYXMgYmVlbiBjb21wbGV0ZWQpLCBp dCBpcyBzdGlsbCBub3Qgc2FmZSB0bwogICAgICBydW4gYSBDQSBvbiBVYnVudHUuPGJyPgogICAg ICA8YnI+CiAgICAgIE9uIDAxLzEyLzE3IDIzOjI3LCBEYXZpZCBIYXJ2ZXkgdmlhIEZyZWVJUEEt dXNlcnMgd3JvdGU6PGJyPgogICAgPC9kaXY+CiAgICA8YmxvY2txdW90ZSB0eXBlPSJjaXRlIgpj aXRlPSJtaWQ6Q0FEcV9KR3F1KzR6cGRPdVE5ai1fTFJtdTJCODBMRXJaZ010R3U1YXBqNGRlRjNR TWdBQG1haWwuZ21haWwuY29tIj4KICAgICAgPGRpdiBkaXI9Imx0ciI+CiAgICAgICAgPGRpdj5o aSBQZXRlciw8L2Rpdj4KICAgICAgICA8ZGl2Pjxicj4KICAgICAgICA8L2Rpdj4KICAgICAgICBO b3QgYSBmdWxsIGFuc3dlciB0byB5b3VyIHF1ZXN0aW9ucyBidXQgZnJvbSBteSBleHBlcmllbmNl OgogICAgICAgIDxkaXY+PGJyPgogICAgICAgIDwvZGl2PgogICAgICAgIDxkaXY+WGVuaWFsOiBX b3JrZWQsIGV4Y2VwdCBPVFAgZnVuY3Rpb25hbGl0eTwvZGl2PgogICAgICAgIDxkaXY+WmVzdHk6 IFdvcmtlZCBleGNlcHQgZm9yIEROUzwvZGl2PgogICAgICAgIDxkaXY+QXJ0ZnVsOiBTZWVtcyBm dWxseSBmdW5jdGlvbmFsIGFuZCBzdGFibGUgb24gdGhlIGZyZXNoCiAgICAgICAgICBpbnN0YWxs ZWQgcmVwbGljYSwgbXkgdXBncmFkZWQgZnJvbSBaZXN0eSByaWcgKHdpdGggdGhlCiAgICAgICAg ICB3b3JrYXJvdW5kcyBub3RlZCBlYXJsaWVyIGluIHRocmVhZCkgU3RpbGwgaGFzIHBraS10b21j YXQKICAgICAgICAgIGJvbWJpbmcgZmFpcmx5IGZyZXF1ZW50bHkuPC9kaXY+CiAgICAgICAgPGRp dj5CaW9uaWM6IEkgaGF2ZSBoaWdoIGhvcGVzIGZvciBnaXZlbiBMVFMuLiA8YQpocmVmPSJodHRw czovL3BhY2thZ2VzLnVidW50dS5jb20vc2VhcmNoP2tleXdvcmRzPWZyZWVpcGEmYW1wO3NlYXJj aG9uPW5hbWVzJmFtcDtzdWl0ZT1iaW9uaWMmYW1wO3NlY3Rpb249YWxsIgogICAgICAgICAgICBt b3otZG8tbm90LXNlbmQ9InRydWUiPkN1cnJlbnRseSBzaG93aW5nIHNhbWUgcGFja2FnZQogICAg ICAgICAgICB2ZXJzaW9uczwvYT4gNC40LjQgYXMgQXJ0ZnVsPC9kaXY+CiAgICAgICAgPGRpdj48 YnI+CiAgICAgICAgPC9kaXY+CiAgICAgICAgPGRpdj5Nb3N0IG9mIHRoZW0gcmVxdWlyZWQgc29t ZSBjYWpvbGluZyBkdXJpbmcgaW5zdGFsbCBvcgogICAgICAgICAgdXBncmFkZSBkdWUgdG8gYnJv a2VuIGluc3RhbGxlciBjb21wb25lbnRzIChsaWtlIGRpcmVjdG9yaWVzCiAgICAgICAgICBub3Qg YmVpbmcgY3JlYXRlZCBpbiBvbmUgY2FzZSwgL2V0Yy9wa2kvcGtpLnZlcnNpb24gY29uZnVzaW5n CiAgICAgICAgICBwb3N0aW5zdGFsbCBpbiBhbm90aGVyKSwgYnV0IG1vc3Qgb2YgdGhlc2UgYmVo YXZpb3VycyB3ZXJlCiAgICAgICAgICBjYXB0dXJlZCBhcyBidWdzIHRvby7CoCBJdCBmZWVscyB2 ZXJ5IGNsb3NlIHRvIGJlaW5nIHNvbWV0aGluZwogICAgICAgICAgdGhhdCBjYW4gYmUgcmVsaWFi bHkgZGVwbG95ZWQsIHNvIEkgZG9uJ3QgdGhpbmsgaXQgbmVlZHMgYQogICAgICAgICAgaHVnZSBh bW91bnQgbW9yZSBUTEMgdG8gbWFrZSBpdCBtb3JlIG9mIGEgcGxlYXN1cmUgdG8gaW5zdGFsbAog ICAgICAgICAgOyk8L2Rpdj4KICAgICAgICA8ZGl2Pjxicj4KICAgICAgICA8L2Rpdj4KICAgICAg ICA8ZGl2PkNoZWVycyw8L2Rpdj4KICAgICAgICA8ZGl2Pjxicj4KICAgICAgICA8L2Rpdj4KICAg ICAgICA8ZGl2PkRhdmlkPC9kaXY+CiAgICAgIDwvZGl2PgogICAgICA8ZGl2IGNsYXNzPSJnbWFp bF9leHRyYSI+PGJyPgogICAgICAgIDxkaXYgY2xhc3M9ImdtYWlsX3F1b3RlIj5PbiAyOCBOb3Zl bWJlciAyMDE3IGF0IDIwOjU4LCBQZXRlcgogICAgICAgICAgRmVybiB2aWEgRnJlZUlQQS11c2Vy cyA8c3BhbiBkaXI9Imx0ciI+Jmx0OzxhCiAgICAgICAgICAgICAgaHJlZj0ibWFpbHRvOmZyZWVp cGEtdXNlcnNAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZyIKICAgICAgICAgICAgICB0YXJnZXQ9Il9i bGFuayIgbW96LWRvLW5vdC1zZW5kPSJ0cnVlIj5mcmVlaXBhLXVzZXJzQGxpc3RzLmZlZG9yYWhv c3RlZC5vcmc8L2E+Jmd0Ozwvc3Bhbj4KICAgICAgICAgIHdyb3RlOjxicj4KICAgICAgICAgIDxi bG9ja3F1b3RlIGNsYXNzPSJnbWFpbF9xdW90ZSIgc3R5bGU9Im1hcmdpbjowIDAgMAogICAgICAg ICAgICAuOGV4O2JvcmRlci1sZWZ0OjFweCAjY2NjIHNvbGlkO3BhZGRpbmctbGVmdDoxZXgiPjxz cGFuCiAgICAgICAgICAgICAgY2xhc3M9IiI+T24gMjMvMTEvMTcgMDU6MzQsIERhdmlkIEhhcnZl eSB2aWEgRnJlZUlQQS11c2VycwogICAgICAgICAgICAgIHdyb3RlOjxicj4KICAgICAgICAgICAg ICAmZ3Q7IE5vdCBzdXJlIHdoeSB0b21jYXQgaXMgbW9yZSByZXNpbGllbnQgd2hlbiBsYXVuY2hl ZAogICAgICAgICAgICAgIGFzIHJvb3QsIGJ1dCB0aGU8YnI+CiAgICAgICAgICAgICAgJmd0OyBw a2kgc2VlbXMgdG8gd29yayBvayBhdCBpc3N1aW5nIGNlcnRzIGFmdGVyIHRoZSBhYm92ZQogICAg ICAgICAgICAgIGFuZCBhIHJlYm9vdCBmb3I8YnI+CiAgICAgICAgICAgICAgJmd0OyBnb29kIG1l YXN1cmUuPGJyPgogICAgICAgICAgICAgIDxicj4KICAgICAgICAgICAgPC9zcGFuPlRoaXMgc291 bmRzIGxpa2UgdGhlcmUgYXJlIGJyb2tlbiBwZXJtaXNzaW9ucyBpbiB0aGUKICAgICAgICAgICAg Y3VycmVudCBVYnVudHU8YnI+CiAgICAgICAgICAgIHBhY2thZ2VzLsKgIFlvdSBzaG91bGQgYmUg YXdhcmUgdGhhdCBsYXN0IHRpbWUgSSBjaGVja2VkLAogICAgICAgICAgICBGcmVlSVBBIG9uPGJy PgogICAgICAgICAgICBVYnVudHUgd2FzIHN1YnRseSB5ZXQgc2V2ZXJlbHkgYnJva2VuLCBtb3N0 bHkgZHVlIHRvIHRoZSBOU1MKICAgICAgICAgICAgbGliczxicj4KICAgICAgICAgICAgbWlzc2lu ZyBQRU0gc3VwcG9ydCwgd2hpY2ggd2lsbCBzdG9wIHlvdXIgQ0EgZnJvbSByZW5ld2luZywKICAg ICAgICAgICAgYW1vbmdzdDxicj4KICAgICAgICAgICAgb3RoZXIgdGhpbmdzLjxicj4KICAgICAg ICAgICAgPGJyPgogICAgICAgICAgICBEb2VzIGFueW9uZSBrbm93IHdoYXQgdGhlIHN0YXRlIG9m IHBhY2thZ2luZyBmb3IgZGViIGRpc3Ryb3MKICAgICAgICAgICAgaXM8YnI+CiAgICAgICAgICAg IGN1cnJlbnRseT/CoCBOb3cgdGhhdCB0aGUgT3BlblNTTCBtaWdyYXRpb24gaXMgY29tcGxldGUo PyksCiAgICAgICAgICAgIHRoZSBiYXJyaWVyczxicj4KICAgICAgICAgICAgdG8gZnVuY3Rpb25h bCBwYWNrYWdlcyBzaG91bGQgYmUgcmVtb3ZlZCwgYnV0IGl0IGxvb2tzIGxpa2UKICAgICAgICAg ICAgdGhhdCBvbmx5PGJyPgogICAgICAgICAgICBoYXBwZW5lZCBpbiA0LjUsIGFuZCBpdCBhcHBl YXJzIG9ubHkgNC40IGlzIHBhY2thZ2VkLCB3aGljaAogICAgICAgICAgICBpcyBsaWtlbHk8YnI+ CiAgICAgICAgICAgIHN0aWxsIGJyb2tlbj88YnI+CiAgICAgICAgICAgIDxzcGFuIGNsYXNzPSJp bSBIT0VuWmIiPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzx3YnI+X19fX19fX19fX19f X19fX188YnI+CiAgICAgICAgICAgICAgRnJlZUlQQS11c2VycyBtYWlsaW5nIGxpc3QgLS0gPGEK ICAgICAgICAgICAgICAgIGhyZWY9Im1haWx0bzpmcmVlaXBhLXVzZXJzQGxpc3RzLmZlZG9yYWhv c3RlZC5vcmciCiAgICAgICAgICAgICAgICBtb3otZG8tbm90LXNlbmQ9InRydWUiPmZyZWVpcGEt dXNlcnNAbGlzdHMuPHdicj5mZWRvcmFob3N0ZWQub3JnPC9hPjxicj4KICAgICAgICAgICAgPC9z cGFuPgogICAgICAgICAgICA8ZGl2IGNsYXNzPSJIT0VuWmIiPgogICAgICAgICAgICAgIDxkaXYg Y2xhc3M9Img1Ij5UbyB1bnN1YnNjcmliZSBzZW5kIGFuIGVtYWlsIHRvIDxhCiAgICAgICAgICAg ICAgICAgIGhyZWY9Im1haWx0bzpmcmVlaXBhLXVzZXJzLWxlYXZlQGxpc3RzLmZlZG9yYWhvc3Rl ZC5vcmciCiAgICAgICAgICAgICAgICAgIG1vei1kby1ub3Qtc2VuZD0idHJ1ZSI+ZnJlZWlwYS11 c2Vycy1sZWF2ZUBsaXN0cy48d2JyPmZlZG9yYWhvc3RlZC5vcmc8L2E+PGJyPgogICAgICAgICAg ICAgIDwvZGl2PgogICAgICAgICAgICA8L2Rpdj4KICAgICAgICAgIDwvYmxvY2txdW90ZT4KICAg ICAgICA8L2Rpdj4KICAgICAgICA8YnI+CiAgICAgIDwvZGl2PgogICAgICA8YnI+CiAgICAgIDxm aWVsZHNldCBjbGFzcz0ibWltZUF0dGFjaG1lbnRIZWFkZXIiPjwvZmllbGRzZXQ+CiAgICAgIDxi cj4KICAgICAgPHByZSB3cmFwPSIiPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fCkZyZWVJUEEtdXNlcnMgbWFpbGluZyBsaXN0IC0tIDxhIGNsYXNzPSJtb3ot dHh0LWxpbmstYWJicmV2aWF0ZWQiIGhyZWY9Im1haWx0bzpmcmVlaXBhLXVzZXJzQGxpc3RzLmZl ZG9yYWhvc3RlZC5vcmciPmZyZWVpcGEtdXNlcnNAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZzwvYT4K VG8gdW5zdWJzY3JpYmUgc2VuZCBhbiBlbWFpbCB0byA8YSBjbGFzcz0ibW96LXR4dC1saW5rLWFi YnJldmlhdGVkIiBocmVmPSJtYWlsdG86ZnJlZWlwYS11c2Vycy1sZWF2ZUBsaXN0cy5mZWRvcmFo b3N0ZWQub3JnIj5mcmVlaXBhLXVzZXJzLWxlYXZlQGxpc3RzLmZlZG9yYWhvc3RlZC5vcmc8L2E+ CjwvcHJlPgogICAgPC9ibG9ja3F1b3RlPgogICAgPHA+PGJyPgogICAgPC9wPgogIDwvYm9keT4K PC9odG1sPgo= --===============8833651182249829757==-- From davidcharvey at googlemail.com Fri Dec 1 16:34:19 2017 Content-Type: multipart/mixed; boundary="===============1106073321393112993==" MIME-Version: 1.0 From: David Harvey To: freeipa-users at lists.fedorahosted.org Subject: [Freeipa-users] Re: upgrade to ubuntu 17.10 fails Date: Fri, 01 Dec 2017 16:33:47 +0000 Message-ID: In-Reply-To: 27790fe4-60b3-9602-30b5-6ec63e4aaeda@0xc0dedbad.com --===============1106073321393112993== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Well that sounds fun :) I'm hesistent to crosspost to pkg-freeipa-devel(a)lists.alioth.debian.org to ask after likelihood of seeing 4.5 in 18.04/Bionic but hope someone here might be able to comment? WRT the exploding CA situation. I guess I'll need to get to a more sane build, or switch over to a better supported rpm based distro if that's not on the cards.. I should be safe in the short term given the standard lifetime of an IPA cert I hope!? I'll continue to try and dig into why pki-tomcat dies on one but not all VMs (ca enabled on 2 of them) On 1 December 2017 at 13:53, Peter Fern via FreeIPA-users < freeipa-users(a)lists.fedorahosted.org> wrote: > Without installing a system to check, it appears to me that nss-pem is > still not packaged for Debian/Ubuntu, which means that certmonger will > break on you when it comes time to auto-renew your CAs. > > I found this out the hard way early this year while running FreeIPA with > CA on Ubuntu, and recovery is very painful once your CA certs have expired > (actually impossible without compiling nss-pem, which requires some source > hacking and compiling of libnss to obtain static libs). > > Since nss-pem is unlikely to be packaged on Debian/-derivs, it looks to me > like until FreeIPA 4.5+ is packaged (where the conversion to OpenSSL has > been completed), it is still not safe to run a CA on Ubuntu. > > > On 01/12/17 23:27, David Harvey via FreeIPA-users wrote: > > hi Peter, > > Not a full answer to your questions but from my experience: > > Xenial: Worked, except OTP functionality > Zesty: Worked except for DNS > Artful: Seems fully functional and stable on the fresh installed replica, > my upgraded from Zesty rig (with the workarounds noted earlier in thread) > Still has pki-tomcat bombing fairly frequently. > Bionic: I have high hopes for given LTS.. Currently showing same package > versions > > 4.4.4 as Artful > > Most of them required some cajoling during install or upgrade due to > broken installer components (like directories not being created in one > case, /etc/pki/pki.version confusing postinstall in another), but most of > these behaviours were captured as bugs too. It feels very close to being > something that can be reliably deployed, so I don't think it needs a huge > amount more TLC to make it more of a pleasure to install ;) > > Cheers, > > David > > On 28 November 2017 at 20:58, Peter Fern via FreeIPA-users < > freeipa-users(a)lists.fedorahosted.org> wrote: > >> On 23/11/17 05:34, David Harvey via FreeIPA-users wrote: >> > Not sure why tomcat is more resilient when launched as root, but the >> > pki seems to work ok at issuing certs after the above and a reboot for >> > good measure. >> >> This sounds like there are broken permissions in the current Ubuntu >> packages. You should be aware that last time I checked, FreeIPA on >> Ubuntu was subtly yet severely broken, mostly due to the NSS libs >> missing PEM support, which will stop your CA from renewing, amongst >> other things. >> >> Does anyone know what the state of packaging for deb distros is >> currently? Now that the OpenSSL migration is complete(?), the barriers >> to functional packages should be removed, but it looks like that only >> happened in 4.5, and it appears only 4.4 is packaged, which is likely >> still broken? >> _______________________________________________ >> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org >> To unsubscribe send an email to freeipa-users-leave(a)lists.fedo >> rahosted.org >> > > > > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.= org > > > > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.= org > > --===============1106073321393112993== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGRpdiBkaXI9Imx0ciI+V2VsbCB0aGF0IHNvdW5kcyBmdW4gOik8ZGl2PkkmIzM5O20gaGVzaXN0 ZW50IHRvIGNyb3NzcG9zdCB0b8KgPGEgaHJlZj0ibWFpbHRvOnBrZy1mcmVlaXBhLWRldmVsQGxp c3RzLmFsaW90aC5kZWJpYW4ub3JnIj5wa2ctZnJlZWlwYS1kZXZlbEBsaXN0cy5hbGlvdGguZGVi aWFuLm9yZzwvYT4gdG8gYXNrIGFmdGVyIGxpa2VsaWhvb2Qgb2Ygc2VlaW5nIDQuNSBpbiAxOC4w NC9CaW9uaWMgYnV0IGhvcGUgc29tZW9uZSBoZXJlIG1pZ2h0IGJlIGFibGUgdG8gY29tbWVudD88 L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PldSVCB0aGUgZXhwbG9kaW5nIENBIHNpdHVhdGlvbi4g SSBndWVzcyBJJiMzOTtsbCBuZWVkIHRvIGdldCB0byBhIG1vcmUgc2FuZSBidWlsZCwgb3Igc3dp dGNoIG92ZXIgdG8gYSBiZXR0ZXIgc3VwcG9ydGVkIHJwbSBiYXNlZCBkaXN0cm8gaWYgdGhhdCYj Mzk7cyBub3Qgb24gdGhlIGNhcmRzLi4gSSBzaG91bGQgYmUgc2FmZSBpbiB0aGUgc2hvcnQgdGVy bSBnaXZlbiB0aGUgc3RhbmRhcmQgbGlmZXRpbWUgb2YgYW4gSVBBIGNlcnQgSSBob3BlIT88L2Rp dj48ZGl2Pjxicj48L2Rpdj48ZGl2PkkmIzM5O2xsIGNvbnRpbnVlIHRvIHRyeSBhbmQgZGlnIGlu dG8gd2h5IHBraS10b21jYXQgZGllcyBvbiBvbmUgYnV0IG5vdCBhbGwgVk1zIChjYSBlbmFibGVk IG9uIDIgb2YgdGhlbSk8L2Rpdj48L2Rpdj48ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+PGJyPjxk aXYgY2xhc3M9ImdtYWlsX3F1b3RlIj5PbiAxIERlY2VtYmVyIDIwMTcgYXQgMTM6NTMsIFBldGVy IEZlcm4gdmlhIEZyZWVJUEEtdXNlcnMgPHNwYW4gZGlyPSJsdHIiPiZsdDs8YSBocmVmPSJtYWls dG86ZnJlZWlwYS11c2Vyc0BsaXN0cy5mZWRvcmFob3N0ZWQub3JnIiB0YXJnZXQ9Il9ibGFuayI+ ZnJlZWlwYS11c2Vyc0BsaXN0cy5mZWRvcmFob3N0ZWQub3JnPC9hPiZndDs8L3NwYW4+IHdyb3Rl Ojxicj48YmxvY2txdW90ZSBjbGFzcz0iZ21haWxfcXVvdGUiIHN0eWxlPSJtYXJnaW46MCAwIDAg LjhleDtib3JkZXItbGVmdDoxcHggI2NjYyBzb2xpZDtwYWRkaW5nLWxlZnQ6MWV4Ij4KICAKICAg IAogIAogIDxkaXYgdGV4dD0iIzAwMDAwMCIgYmdjb2xvcj0iI0ZGRkZGRiI+CiAgICA8ZGl2IGNs YXNzPSJtXy03NzA0MDY2MDc4MDIwMTcyNDAxbW96LWNpdGUtcHJlZml4Ij5XaXRob3V0IGluc3Rh bGxpbmcgYSBzeXN0ZW0gdG8gY2hlY2ssCiAgICAgIGl0IGFwcGVhcnMgdG8gbWUgdGhhdCBuc3Mt cGVtIGlzIHN0aWxsIG5vdCBwYWNrYWdlZCBmb3IKICAgICAgRGViaWFuL1VidW50dSwgd2hpY2gg bWVhbnMgdGhhdCBjZXJ0bW9uZ2VyIHdpbGwgYnJlYWsgb24geW91IHdoZW4KICAgICAgaXQgY29t ZXMgdGltZSB0byBhdXRvLXJlbmV3IHlvdXIgQ0FzLjxicj4KICAgICAgPGJyPgogICAgICBJIGZv dW5kIHRoaXMgb3V0IHRoZSBoYXJkIHdheSBlYXJseSB0aGlzIHllYXIgd2hpbGUgcnVubmluZwog ICAgICBGcmVlSVBBIHdpdGggQ0Egb24gVWJ1bnR1LCBhbmQgcmVjb3ZlcnkgaXMgdmVyeSBwYWlu ZnVsIG9uY2UgeW91cgogICAgICBDQSBjZXJ0cyBoYXZlIGV4cGlyZWQgKGFjdHVhbGx5IGltcG9z c2libGUgd2l0aG91dCBjb21waWxpbmcKICAgICAgbnNzLXBlbSwgd2hpY2ggcmVxdWlyZXMgc29t ZSBzb3VyY2UgaGFja2luZyBhbmQgY29tcGlsaW5nIG9mCiAgICAgIGxpYm5zcyB0byBvYnRhaW4g c3RhdGljIGxpYnMpLjxicj4KICAgICAgPGJyPgogICAgICBTaW5jZSBuc3MtcGVtIGlzIHVubGlr ZWx5IHRvIGJlIHBhY2thZ2VkIG9uIERlYmlhbi8tZGVyaXZzLCBpdAogICAgICBsb29rcyB0byBt ZSBsaWtlIHVudGlsIEZyZWVJUEEgNC41KyBpcyBwYWNrYWdlZCAod2hlcmUgdGhlCiAgICAgIGNv bnZlcnNpb24gdG8gT3BlblNTTCBoYXMgYmVlbiBjb21wbGV0ZWQpLCBpdCBpcyBzdGlsbCBub3Qg c2FmZSB0bwogICAgICBydW4gYSBDQSBvbiBVYnVudHUuPGRpdj48ZGl2IGNsYXNzPSJoNSI+PGJy PgogICAgICA8YnI+CiAgICAgIE9uIDAxLzEyLzE3IDIzOjI3LCBEYXZpZCBIYXJ2ZXkgdmlhIEZy ZWVJUEEtdXNlcnMgd3JvdGU6PGJyPgogICAgPC9kaXY+PC9kaXY+PC9kaXY+PGRpdj48ZGl2IGNs YXNzPSJoNSI+CiAgICA8YmxvY2txdW90ZSB0eXBlPSJjaXRlIj4KICAgICAgPGRpdiBkaXI9Imx0 ciI+CiAgICAgICAgPGRpdj5oaSBQZXRlciw8L2Rpdj4KICAgICAgICA8ZGl2Pjxicj4KICAgICAg ICA8L2Rpdj4KICAgICAgICBOb3QgYSBmdWxsIGFuc3dlciB0byB5b3VyIHF1ZXN0aW9ucyBidXQg ZnJvbSBteSBleHBlcmllbmNlOgogICAgICAgIDxkaXY+PGJyPgogICAgICAgIDwvZGl2PgogICAg ICAgIDxkaXY+WGVuaWFsOiBXb3JrZWQsIGV4Y2VwdCBPVFAgZnVuY3Rpb25hbGl0eTwvZGl2Pgog ICAgICAgIDxkaXY+WmVzdHk6IFdvcmtlZCBleGNlcHQgZm9yIEROUzwvZGl2PgogICAgICAgIDxk aXY+QXJ0ZnVsOiBTZWVtcyBmdWxseSBmdW5jdGlvbmFsIGFuZCBzdGFibGUgb24gdGhlIGZyZXNo CiAgICAgICAgICBpbnN0YWxsZWQgcmVwbGljYSwgbXkgdXBncmFkZWQgZnJvbSBaZXN0eSByaWcg KHdpdGggdGhlCiAgICAgICAgICB3b3JrYXJvdW5kcyBub3RlZCBlYXJsaWVyIGluIHRocmVhZCkg U3RpbGwgaGFzIHBraS10b21jYXQKICAgICAgICAgIGJvbWJpbmcgZmFpcmx5IGZyZXF1ZW50bHku PC9kaXY+CiAgICAgICAgPGRpdj5CaW9uaWM6IEkgaGF2ZSBoaWdoIGhvcGVzIGZvciBnaXZlbiBM VFMuLiA8YSBocmVmPSJodHRwczovL3BhY2thZ2VzLnVidW50dS5jb20vc2VhcmNoP2tleXdvcmRz PWZyZWVpcGEmYW1wO3NlYXJjaG9uPW5hbWVzJmFtcDtzdWl0ZT1iaW9uaWMmYW1wO3NlY3Rpb249 YWxsIiB0YXJnZXQ9Il9ibGFuayI+Q3VycmVudGx5IHNob3dpbmcgc2FtZSBwYWNrYWdlCiAgICAg ICAgICAgIHZlcnNpb25zPC9hPiA0LjQuNCBhcyBBcnRmdWw8L2Rpdj4KICAgICAgICA8ZGl2Pjxi cj4KICAgICAgICA8L2Rpdj4KICAgICAgICA8ZGl2Pk1vc3Qgb2YgdGhlbSByZXF1aXJlZCBzb21l IGNham9saW5nIGR1cmluZyBpbnN0YWxsIG9yCiAgICAgICAgICB1cGdyYWRlIGR1ZSB0byBicm9r ZW4gaW5zdGFsbGVyIGNvbXBvbmVudHMgKGxpa2UgZGlyZWN0b3JpZXMKICAgICAgICAgIG5vdCBi ZWluZyBjcmVhdGVkIGluIG9uZSBjYXNlLCAvZXRjL3BraS9wa2kudmVyc2lvbiBjb25mdXNpbmcK ICAgICAgICAgIHBvc3RpbnN0YWxsIGluIGFub3RoZXIpLCBidXQgbW9zdCBvZiB0aGVzZSBiZWhh dmlvdXJzIHdlcmUKICAgICAgICAgIGNhcHR1cmVkIGFzIGJ1Z3MgdG9vLsKgIEl0IGZlZWxzIHZl cnkgY2xvc2UgdG8gYmVpbmcgc29tZXRoaW5nCiAgICAgICAgICB0aGF0IGNhbiBiZSByZWxpYWJs eSBkZXBsb3llZCwgc28gSSBkb24mIzM5O3QgdGhpbmsgaXQgbmVlZHMgYQogICAgICAgICAgaHVn ZSBhbW91bnQgbW9yZSBUTEMgdG8gbWFrZSBpdCBtb3JlIG9mIGEgcGxlYXN1cmUgdG8gaW5zdGFs bAogICAgICAgICAgOyk8L2Rpdj4KICAgICAgICA8ZGl2Pjxicj4KICAgICAgICA8L2Rpdj4KICAg ICAgICA8ZGl2PkNoZWVycyw8L2Rpdj4KICAgICAgICA8ZGl2Pjxicj4KICAgICAgICA8L2Rpdj4K ICAgICAgICA8ZGl2PkRhdmlkPC9kaXY+CiAgICAgIDwvZGl2PgogICAgICA8ZGl2IGNsYXNzPSJn bWFpbF9leHRyYSI+PGJyPgogICAgICAgIDxkaXYgY2xhc3M9ImdtYWlsX3F1b3RlIj5PbiAyOCBO b3ZlbWJlciAyMDE3IGF0IDIwOjU4LCBQZXRlcgogICAgICAgICAgRmVybiB2aWEgRnJlZUlQQS11 c2VycyA8c3BhbiBkaXI9Imx0ciI+Jmx0OzxhIGhyZWY9Im1haWx0bzpmcmVlaXBhLXVzZXJzQGxp c3RzLmZlZG9yYWhvc3RlZC5vcmciIHRhcmdldD0iX2JsYW5rIj5mcmVlaXBhLXVzZXJzQGxpc3Rz Ljx3YnI+ZmVkb3JhaG9zdGVkLm9yZzwvYT4mZ3Q7PC9zcGFuPgogICAgICAgICAgd3JvdGU6PGJy PgogICAgICAgICAgPGJsb2NrcXVvdGUgY2xhc3M9ImdtYWlsX3F1b3RlIiBzdHlsZT0ibWFyZ2lu OjAgMCAwIC44ZXg7Ym9yZGVyLWxlZnQ6MXB4ICNjY2Mgc29saWQ7cGFkZGluZy1sZWZ0OjFleCI+ PHNwYW4+T24gMjMvMTEvMTcgMDU6MzQsIERhdmlkIEhhcnZleSB2aWEgRnJlZUlQQS11c2Vycwog ICAgICAgICAgICAgIHdyb3RlOjxicj4KICAgICAgICAgICAgICAmZ3Q7IE5vdCBzdXJlIHdoeSB0 b21jYXQgaXMgbW9yZSByZXNpbGllbnQgd2hlbiBsYXVuY2hlZAogICAgICAgICAgICAgIGFzIHJv b3QsIGJ1dCB0aGU8YnI+CiAgICAgICAgICAgICAgJmd0OyBwa2kgc2VlbXMgdG8gd29yayBvayBh dCBpc3N1aW5nIGNlcnRzIGFmdGVyIHRoZSBhYm92ZQogICAgICAgICAgICAgIGFuZCBhIHJlYm9v dCBmb3I8YnI+CiAgICAgICAgICAgICAgJmd0OyBnb29kIG1lYXN1cmUuPGJyPgogICAgICAgICAg ICAgIDxicj4KICAgICAgICAgICAgPC9zcGFuPlRoaXMgc291bmRzIGxpa2UgdGhlcmUgYXJlIGJy b2tlbiBwZXJtaXNzaW9ucyBpbiB0aGUKICAgICAgICAgICAgY3VycmVudCBVYnVudHU8YnI+CiAg ICAgICAgICAgIHBhY2thZ2VzLsKgIFlvdSBzaG91bGQgYmUgYXdhcmUgdGhhdCBsYXN0IHRpbWUg SSBjaGVja2VkLAogICAgICAgICAgICBGcmVlSVBBIG9uPGJyPgogICAgICAgICAgICBVYnVudHUg d2FzIHN1YnRseSB5ZXQgc2V2ZXJlbHkgYnJva2VuLCBtb3N0bHkgZHVlIHRvIHRoZSBOU1MKICAg ICAgICAgICAgbGliczxicj4KICAgICAgICAgICAgbWlzc2luZyBQRU0gc3VwcG9ydCwgd2hpY2gg d2lsbCBzdG9wIHlvdXIgQ0EgZnJvbSByZW5ld2luZywKICAgICAgICAgICAgYW1vbmdzdDxicj4K ICAgICAgICAgICAgb3RoZXIgdGhpbmdzLjxicj4KICAgICAgICAgICAgPGJyPgogICAgICAgICAg ICBEb2VzIGFueW9uZSBrbm93IHdoYXQgdGhlIHN0YXRlIG9mIHBhY2thZ2luZyBmb3IgZGViIGRp c3Ryb3MKICAgICAgICAgICAgaXM8YnI+CiAgICAgICAgICAgIGN1cnJlbnRseT/CoCBOb3cgdGhh dCB0aGUgT3BlblNTTCBtaWdyYXRpb24gaXMgY29tcGxldGUoPyksCiAgICAgICAgICAgIHRoZSBi YXJyaWVyczxicj4KICAgICAgICAgICAgdG8gZnVuY3Rpb25hbCBwYWNrYWdlcyBzaG91bGQgYmUg cmVtb3ZlZCwgYnV0IGl0IGxvb2tzIGxpa2UKICAgICAgICAgICAgdGhhdCBvbmx5PGJyPgogICAg ICAgICAgICBoYXBwZW5lZCBpbiA0LjUsIGFuZCBpdCBhcHBlYXJzIG9ubHkgNC40IGlzIHBhY2th Z2VkLCB3aGljaAogICAgICAgICAgICBpcyBsaWtlbHk8YnI+CiAgICAgICAgICAgIHN0aWxsIGJy b2tlbj88YnI+CiAgICAgICAgICAgIDxzcGFuIGNsYXNzPSJtXy03NzA0MDY2MDc4MDIwMTcyNDAx aW0gbV8tNzcwNDA2NjA3ODAyMDE3MjQwMUhPRW5aYiI+X19fX19fX19fX19fX19fX19fX19fX19f X19fX19fPHdicj5fX19fX19fX19fX19fX19fXzxicj4KICAgICAgICAgICAgICBGcmVlSVBBLXVz ZXJzIG1haWxpbmcgbGlzdCAtLSA8YSBocmVmPSJtYWlsdG86ZnJlZWlwYS11c2Vyc0BsaXN0cy5m ZWRvcmFob3N0ZWQub3JnIiB0YXJnZXQ9Il9ibGFuayI+ZnJlZWlwYS11c2Vyc0BsaXN0cy5mZWRv cmFob3N0PHdicj5lZC5vcmc8L2E+PGJyPgogICAgICAgICAgICA8L3NwYW4+CiAgICAgICAgICAg IDxkaXYgY2xhc3M9Im1fLTc3MDQwNjYwNzgwMjAxNzI0MDFIT0VuWmIiPgogICAgICAgICAgICAg IDxkaXYgY2xhc3M9Im1fLTc3MDQwNjYwNzgwMjAxNzI0MDFoNSI+VG8gdW5zdWJzY3JpYmUgc2Vu ZCBhbiBlbWFpbCB0byA8YSBocmVmPSJtYWlsdG86ZnJlZWlwYS11c2Vycy1sZWF2ZUBsaXN0cy5m ZWRvcmFob3N0ZWQub3JnIiB0YXJnZXQ9Il9ibGFuayI+ZnJlZWlwYS11c2Vycy1sZWF2ZUBsaXN0 cy5mZWRvPHdicj5yYWhvc3RlZC5vcmc8L2E+PGJyPgogICAgICAgICAgICAgIDwvZGl2PgogICAg ICAgICAgICA8L2Rpdj4KICAgICAgICAgIDwvYmxvY2txdW90ZT4KICAgICAgICA8L2Rpdj4KICAg ICAgICA8YnI+CiAgICAgIDwvZGl2PgogICAgICA8YnI+CiAgICAgIDxmaWVsZHNldCBjbGFzcz0i bV8tNzcwNDA2NjA3ODAyMDE3MjQwMW1pbWVBdHRhY2htZW50SGVhZGVyIj48L2ZpZWxkc2V0Pgog ICAgICA8YnI+CiAgICAgIDxwcmU+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPHdicj5f X19fX19fX19fX19fX19fXwpGcmVlSVBBLXVzZXJzIG1haWxpbmcgbGlzdCAtLSA8YSBjbGFzcz0i bV8tNzcwNDA2NjA3ODAyMDE3MjQwMW1vei10eHQtbGluay1hYmJyZXZpYXRlZCIgaHJlZj0ibWFp bHRvOmZyZWVpcGEtdXNlcnNAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZyIgdGFyZ2V0PSJfYmxhbmsi PmZyZWVpcGEtdXNlcnNAbGlzdHMuPHdicj5mZWRvcmFob3N0ZWQub3JnPC9hPgpUbyB1bnN1YnNj cmliZSBzZW5kIGFuIGVtYWlsIHRvIDxhIGNsYXNzPSJtXy03NzA0MDY2MDc4MDIwMTcyNDAxbW96 LXR4dC1saW5rLWFiYnJldmlhdGVkIiBocmVmPSJtYWlsdG86ZnJlZWlwYS11c2Vycy1sZWF2ZUBs aXN0cy5mZWRvcmFob3N0ZWQub3JnIiB0YXJnZXQ9Il9ibGFuayI+ZnJlZWlwYS11c2Vycy1sZWF2 ZUBsaXN0cy48d2JyPmZlZG9yYWhvc3RlZC5vcmc8L2E+CjwvcHJlPgogICAgPC9ibG9ja3F1b3Rl PgogICAgPHA+PGJyPgogICAgPC9wPgogIDwvZGl2PjwvZGl2PjwvZGl2PgoKPGJyPl9fX19fX19f X19fX19fX19fX19fX19fX19fX19fXzx3YnI+X19fX19fX19fX19fX19fX188YnI+CkZyZWVJUEEt dXNlcnMgbWFpbGluZyBsaXN0IC0tIDxhIGhyZWY9Im1haWx0bzpmcmVlaXBhLXVzZXJzQGxpc3Rz LmZlZG9yYWhvc3RlZC5vcmciPmZyZWVpcGEtdXNlcnNAbGlzdHMuPHdicj5mZWRvcmFob3N0ZWQu b3JnPC9hPjxicj4KVG8gdW5zdWJzY3JpYmUgc2VuZCBhbiBlbWFpbCB0byA8YSBocmVmPSJtYWls dG86ZnJlZWlwYS11c2Vycy1sZWF2ZUBsaXN0cy5mZWRvcmFob3N0ZWQub3JnIj5mcmVlaXBhLXVz ZXJzLWxlYXZlQGxpc3RzLjx3YnI+ZmVkb3JhaG9zdGVkLm9yZzwvYT48YnI+Cjxicj48L2Jsb2Nr cXVvdGU+PC9kaXY+PGJyPjwvZGl2Pgo= --===============1106073321393112993==-- From rcritten at redhat.com Fri Dec 1 18:40:54 2017 Content-Type: multipart/mixed; boundary="===============9135542992554623808==" MIME-Version: 1.0 From: Rob Crittenden To: freeipa-users at lists.fedorahosted.org Subject: [Freeipa-users] Re: upgrade to ubuntu 17.10 fails Date: Fri, 01 Dec 2017 13:40:23 -0500 Message-ID: In-Reply-To: CADq_JGq9PrMo6SoOVhX=-MYxObieTpif-8vkF_X234fHU7MQAg@mail.gmail.com --===============9135542992554623808== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable David Harvey via FreeIPA-users wrote: > Well that sounds fun :) > I'm hesistent to crosspost to pkg-freeipa-devel(a)lists.alioth.debian.org > to ask after > likelihood of seeing 4.5 in 18.04/Bionic but hope someone here might be > able to comment? > = > WRT the exploding CA situation. I guess I'll need to get to a more sane > build, or switch over to a better supported rpm based distro if that's > not on the cards.. I should be safe in the short term given the standard > lifetime of an IPA cert I hope!? > = > I'll continue to try and dig into why pki-tomcat dies on one but not all > VMs (ca enabled on 2 of them) The risk you have isn't with the CA itself expiring but with the support certificates (OCSP, audit, subsystem, etc). Those have a 2-year validity period. rob > = > On 1 December 2017 at 13:53, Peter Fern via FreeIPA-users > > wrote: > = > Without installing a system to check, it appears to me that nss-pem > is still not packaged for Debian/Ubuntu, which means that certmonger > will break on you when it comes time to auto-renew your CAs. > = > I found this out the hard way early this year while running FreeIPA > with CA on Ubuntu, and recovery is very painful once your CA certs > have expired (actually impossible without compiling nss-pem, which > requires some source hacking and compiling of libnss to obtain > static libs). > = > Since nss-pem is unlikely to be packaged on Debian/-derivs, it looks > to me like until FreeIPA 4.5+ is packaged (where the conversion to > OpenSSL has been completed), it is still not safe to run a CA on Ubun= tu. > = > = > On 01/12/17 23:27, David Harvey via FreeIPA-users wrote: >> hi Peter, >> >> Not a full answer to your questions but from my experience: >> >> Xenial: Worked, except OTP functionality >> Zesty: Worked except for DNS >> Artful: Seems fully functional and stable on the fresh installed >> replica, my upgraded from Zesty rig (with the workarounds noted >> earlier in thread) Still has pki-tomcat bombing fairly frequently. >> Bionic: I have high hopes for given LTS.. Currently showing same >> package versions >> >> 4.4.4 as Artful >> >> Most of them required some cajoling during install or upgrade due >> to broken installer components (like directories not being created >> in one case, /etc/pki/pki.version confusing postinstall in >> another), but most of these behaviours were captured as bugs too. = >> It feels very close to being something that can be reliably >> deployed, so I don't think it needs a huge amount more TLC to make >> it more of a pleasure to install ;) >> >> Cheers, >> >> David >> >> On 28 November 2017 at 20:58, Peter Fern via FreeIPA-users >> > > wrote: >> >> On 23/11/17 05:34, David Harvey via FreeIPA-users wrote: >> > Not sure why tomcat is more resilient when launched as root, >> but the >> > pki seems to work ok at issuing certs after the above and a >> reboot for >> > good measure. >> >> This sounds like there are broken permissions in the current >> Ubuntu >> packages. You should be aware that last time I checked, >> FreeIPA on >> Ubuntu was subtly yet severely broken, mostly due to the NSS libs >> missing PEM support, which will stop your CA from renewing, >> amongst >> other things. >> >> Does anyone know what the state of packaging for deb distros is >> currently? Now that the OpenSSL migration is complete(?), the >> barriers >> to functional packages should be removed, but it looks like >> that only >> happened in 4.5, and it appears only 4.4 is packaged, which is >> likely >> still broken? >> _______________________________________________ >> FreeIPA-users mailing list -- >> freeipa-users(a)lists.fedorahosted.org >> >> To unsubscribe send an email to >> freeipa-users-leave(a)lists.fedorahosted.org >> >> >> >> >> >> _______________________________________________ >> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org >> >> To unsubscribe send an email to freeipa-users-leave(a)lists.fedoraho= sted.org >> > = > = > = > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > > To unsubscribe send an email to > freeipa-users-leave(a)lists.fedorahosted.org > > = > = > = > = > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.= org >=20 --===============9135542992554623808==-- From davidcharvey at googlemail.com Fri Dec 1 19:33:22 2017 Content-Type: multipart/mixed; boundary="===============4258684136862177531==" MIME-Version: 1.0 From: David Harvey To: freeipa-users at lists.fedorahosted.org Subject: [Freeipa-users] Re: upgrade to ubuntu 17.10 fails Date: Fri, 01 Dec 2017 19:32:42 +0000 Message-ID: In-Reply-To: b9909c4d-c62d-06cc-9832-cee9561238b1@redhat.com --===============4258684136862177531== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Ok, thanks for the clarification. Hopefully can still mitigate by changing platform or waiting for a better supported Ubuntu release! On 1 Dec 2017 18:40, "Rob Crittenden" wrote: > David Harvey via FreeIPA-users wrote: > > Well that sounds fun :) > > I'm hesistent to crosspost to pkg-freeipa-devel(a)lists.alioth.debian.o= rg > > to ask after > > likelihood of seeing 4.5 in 18.04/Bionic but hope someone here might be > > able to comment? > > > > WRT the exploding CA situation. I guess I'll need to get to a more sane > > build, or switch over to a better supported rpm based distro if that's > > not on the cards.. I should be safe in the short term given the standard > > lifetime of an IPA cert I hope!? > > > > I'll continue to try and dig into why pki-tomcat dies on one but not all > > VMs (ca enabled on 2 of them) > > The risk you have isn't with the CA itself expiring but with the support > certificates (OCSP, audit, subsystem, etc). Those have a 2-year validity > period. > > rob > > > > > On 1 December 2017 at 13:53, Peter Fern via FreeIPA-users > > > > wrote: > > > > Without installing a system to check, it appears to me that nss-pem > > is still not packaged for Debian/Ubuntu, which means that certmonger > > will break on you when it comes time to auto-renew your CAs. > > > > I found this out the hard way early this year while running FreeIPA > > with CA on Ubuntu, and recovery is very painful once your CA certs > > have expired (actually impossible without compiling nss-pem, which > > requires some source hacking and compiling of libnss to obtain > > static libs). > > > > Since nss-pem is unlikely to be packaged on Debian/-derivs, it looks > > to me like until FreeIPA 4.5+ is packaged (where the conversion to > > OpenSSL has been completed), it is still not safe to run a CA on > Ubuntu. > > > > > > On 01/12/17 23:27, David Harvey via FreeIPA-users wrote: > >> hi Peter, > >> > >> Not a full answer to your questions but from my experience: > >> > >> Xenial: Worked, except OTP functionality > >> Zesty: Worked except for DNS > >> Artful: Seems fully functional and stable on the fresh installed > >> replica, my upgraded from Zesty rig (with the workarounds noted > >> earlier in thread) Still has pki-tomcat bombing fairly frequently. > >> Bionic: I have high hopes for given LTS.. Currently showing same > >> package versions > >> searchon=3Dnames&suite=3Dbionic§ion=3Dall> > >> 4.4.4 as Artful > >> > >> Most of them required some cajoling during install or upgrade due > >> to broken installer components (like directories not being created > >> in one case, /etc/pki/pki.version confusing postinstall in > >> another), but most of these behaviours were captured as bugs too. > >> It feels very close to being something that can be reliably > >> deployed, so I don't think it needs a huge amount more TLC to make > >> it more of a pleasure to install ;) > >> > >> Cheers, > >> > >> David > >> > >> On 28 November 2017 at 20:58, Peter Fern via FreeIPA-users > >> >> > wrote: > >> > >> On 23/11/17 05:34, David Harvey via FreeIPA-users wrote: > >> > Not sure why tomcat is more resilient when launched as root, > >> but the > >> > pki seems to work ok at issuing certs after the above and a > >> reboot for > >> > good measure. > >> > >> This sounds like there are broken permissions in the current > >> Ubuntu > >> packages. You should be aware that last time I checked, > >> FreeIPA on > >> Ubuntu was subtly yet severely broken, mostly due to the NSS > libs > >> missing PEM support, which will stop your CA from renewing, > >> amongst > >> other things. > >> > >> Does anyone know what the state of packaging for deb distros is > >> currently? Now that the OpenSSL migration is complete(?), the > >> barriers > >> to functional packages should be removed, but it looks like > >> that only > >> happened in 4.5, and it appears only 4.4 is packaged, which is > >> likely > >> still broken? > >> _______________________________________________ > >> FreeIPA-users mailing list -- > >> freeipa-users(a)lists.fedorahosted.org > >> > >> To unsubscribe send an email to > >> freeipa-users-leave(a)lists.fedorahosted.org > >> > >> > >> > >> > >> > >> _______________________________________________ > >> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.o= rg > >> > >> To unsubscribe send an email to freeipa-users-leave(a)lists. > fedorahosted.org > >> > > > > > > > > _______________________________________________ > > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > > > > To unsubscribe send an email to > > freeipa-users-leave(a)lists.fedorahosted.org > > > > > > > > > > > > _______________________________________________ > > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > > To unsubscribe send an email to freeipa-users-leave(a)lists. > fedorahosted.org > > > > --===============4258684136862177531== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGRpdiBkaXI9ImF1dG8iPk9rLCB0aGFua3MgZm9yIHRoZSBjbGFyaWZpY2F0aW9uLiBIb3BlZnVs bHkgY2FuIHN0aWxsIG1pdGlnYXRlIGJ5IGNoYW5naW5nIHBsYXRmb3JtIG9yIHdhaXRpbmcgZm9y IGEgYmV0dGVyIHN1cHBvcnRlZCBVYnVudHUgcmVsZWFzZSE8L2Rpdj48ZGl2IGNsYXNzPSJnbWFp bF9leHRyYSI+PGJyPjxkaXYgY2xhc3M9ImdtYWlsX3F1b3RlIj5PbiAxIERlYyAyMDE3IDE4OjQw LCAmcXVvdDtSb2IgQ3JpdHRlbmRlbiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJjcml0dGVu QHJlZGhhdC5jb20iPnJjcml0dGVuQHJlZGhhdC5jb208L2E+Jmd0OyB3cm90ZTo8YnIgdHlwZT0i YXR0cmlidXRpb24iPjxibG9ja3F1b3RlIGNsYXNzPSJnbWFpbF9xdW90ZSIgc3R5bGU9Im1hcmdp bjowIDAgMCAuOGV4O2JvcmRlci1sZWZ0OjFweCAjY2NjIHNvbGlkO3BhZGRpbmctbGVmdDoxZXgi PkRhdmlkIEhhcnZleSB2aWEgRnJlZUlQQS11c2VycyB3cm90ZTo8YnI+CiZndDsgV2VsbCB0aGF0 IHNvdW5kcyBmdW4gOik8YnI+CiZndDsgSSYjMzk7bSBoZXNpc3RlbnQgdG8gY3Jvc3Nwb3N0IHRv IDxhIGhyZWY9Im1haWx0bzpwa2ctZnJlZWlwYS1kZXZlbEBsaXN0cy5hbGlvdGguZGViaWFuLm9y ZyI+cGtnLWZyZWVpcGEtZGV2ZWxAbGlzdHMuPHdicj5hbGlvdGguZGViaWFuLm9yZzwvYT48YnI+ CiZndDsgJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86cGtnLWZyZWVpcGEtZGV2ZWxAbGlzdHMu YWxpb3RoLmRlYmlhbi5vcmciPnBrZy1mcmVlaXBhLWRldmVsQDx3YnI+bGlzdHMuYWxpb3RoLmRl Ymlhbi5vcmc8L2E+Jmd0OyB0byBhc2sgYWZ0ZXI8YnI+CiZndDsgbGlrZWxpaG9vZCBvZiBzZWVp bmcgNC41IGluIDE4LjA0L0Jpb25pYyBidXQgaG9wZSBzb21lb25lIGhlcmUgbWlnaHQgYmU8YnI+ CiZndDsgYWJsZSB0byBjb21tZW50Pzxicj4KJmd0Ozxicj4KJmd0OyBXUlQgdGhlIGV4cGxvZGlu ZyBDQSBzaXR1YXRpb24uIEkgZ3Vlc3MgSSYjMzk7bGwgbmVlZCB0byBnZXQgdG8gYSBtb3JlIHNh bmU8YnI+CiZndDsgYnVpbGQsIG9yIHN3aXRjaCBvdmVyIHRvIGEgYmV0dGVyIHN1cHBvcnRlZCBy cG0gYmFzZWQgZGlzdHJvIGlmIHRoYXQmIzM5O3M8YnI+CiZndDsgbm90IG9uIHRoZSBjYXJkcy4u IEkgc2hvdWxkIGJlIHNhZmUgaW4gdGhlIHNob3J0IHRlcm0gZ2l2ZW4gdGhlIHN0YW5kYXJkPGJy PgomZ3Q7IGxpZmV0aW1lIG9mIGFuIElQQSBjZXJ0IEkgaG9wZSE/PGJyPgomZ3Q7PGJyPgomZ3Q7 IEkmIzM5O2xsIGNvbnRpbnVlIHRvIHRyeSBhbmQgZGlnIGludG8gd2h5IHBraS10b21jYXQgZGll cyBvbiBvbmUgYnV0IG5vdCBhbGw8YnI+CiZndDsgVk1zIChjYSBlbmFibGVkIG9uIDIgb2YgdGhl bSk8YnI+Cjxicj4KVGhlIHJpc2sgeW91IGhhdmUgaXNuJiMzOTt0IHdpdGggdGhlIENBIGl0c2Vs ZiBleHBpcmluZyBidXQgd2l0aCB0aGUgc3VwcG9ydDxicj4KY2VydGlmaWNhdGVzIChPQ1NQLCBh dWRpdCwgc3Vic3lzdGVtLCBldGMpLiBUaG9zZSBoYXZlIGEgMi15ZWFyIHZhbGlkaXR5PGJyPgpw ZXJpb2QuPGJyPgo8YnI+CnJvYjxicj4KPGJyPgomZ3Q7PGJyPgomZ3Q7IE9uIDEgRGVjZW1iZXIg MjAxNyBhdCAxMzo1MywgUGV0ZXIgRmVybiB2aWEgRnJlZUlQQS11c2Vyczxicj4KJmd0OyAmbHQ7 PGEgaHJlZj0ibWFpbHRvOmZyZWVpcGEtdXNlcnNAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZyI+ZnJl ZWlwYS11c2Vyc0BsaXN0cy48d2JyPmZlZG9yYWhvc3RlZC5vcmc8L2E+PGJyPgomZ3Q7ICZsdDtt YWlsdG86PGEgaHJlZj0ibWFpbHRvOmZyZWVpcGEtdXNlcnNAbGlzdHMuZmVkb3JhaG9zdGVkLm9y ZyI+ZnJlZWlwYS11c2Vyc0BsaXN0cy48d2JyPmZlZG9yYWhvc3RlZC5vcmc8L2E+Jmd0OyZndDsg d3JvdGU6PGJyPgomZ3Q7PGJyPgomZ3Q7wqAgwqAgwqBXaXRob3V0IGluc3RhbGxpbmcgYSBzeXN0 ZW0gdG8gY2hlY2ssIGl0IGFwcGVhcnMgdG8gbWUgdGhhdCBuc3MtcGVtPGJyPgomZ3Q7wqAgwqAg wqBpcyBzdGlsbCBub3QgcGFja2FnZWQgZm9yIERlYmlhbi9VYnVudHUsIHdoaWNoIG1lYW5zIHRo YXQgY2VydG1vbmdlcjxicj4KJmd0O8KgIMKgIMKgd2lsbCBicmVhayBvbiB5b3Ugd2hlbiBpdCBj b21lcyB0aW1lIHRvIGF1dG8tcmVuZXcgeW91ciBDQXMuPGJyPgomZ3Q7PGJyPgomZ3Q7wqAgwqAg wqBJIGZvdW5kIHRoaXMgb3V0IHRoZSBoYXJkIHdheSBlYXJseSB0aGlzIHllYXIgd2hpbGUgcnVu bmluZyBGcmVlSVBBPGJyPgomZ3Q7wqAgwqAgwqB3aXRoIENBIG9uIFVidW50dSwgYW5kIHJlY292 ZXJ5IGlzIHZlcnkgcGFpbmZ1bCBvbmNlIHlvdXIgQ0EgY2VydHM8YnI+CiZndDvCoCDCoCDCoGhh dmUgZXhwaXJlZCAoYWN0dWFsbHkgaW1wb3NzaWJsZSB3aXRob3V0IGNvbXBpbGluZyBuc3MtcGVt LCB3aGljaDxicj4KJmd0O8KgIMKgIMKgcmVxdWlyZXMgc29tZSBzb3VyY2UgaGFja2luZyBhbmQg Y29tcGlsaW5nIG9mIGxpYm5zcyB0byBvYnRhaW48YnI+CiZndDvCoCDCoCDCoHN0YXRpYyBsaWJz KS48YnI+CiZndDs8YnI+CiZndDvCoCDCoCDCoFNpbmNlIG5zcy1wZW0gaXMgdW5saWtlbHkgdG8g YmUgcGFja2FnZWQgb24gRGViaWFuLy1kZXJpdnMsIGl0IGxvb2tzPGJyPgomZ3Q7wqAgwqAgwqB0 byBtZSBsaWtlIHVudGlsIEZyZWVJUEEgNC41KyBpcyBwYWNrYWdlZCAod2hlcmUgdGhlIGNvbnZl cnNpb24gdG88YnI+CiZndDvCoCDCoCDCoE9wZW5TU0wgaGFzIGJlZW4gY29tcGxldGVkKSwgaXQg aXMgc3RpbGwgbm90IHNhZmUgdG8gcnVuIGEgQ0Egb24gVWJ1bnR1Ljxicj4KJmd0Ozxicj4KJmd0 Ozxicj4KJmd0O8KgIMKgIMKgT24gMDEvMTIvMTcgMjM6MjcsIERhdmlkIEhhcnZleSB2aWEgRnJl ZUlQQS11c2VycyB3cm90ZTo8YnI+CiZndDsmZ3Q7wqAgwqAgwqBoaSBQZXRlciw8YnI+CiZndDsm Z3Q7PGJyPgomZ3Q7Jmd0O8KgIMKgIMKgTm90IGEgZnVsbCBhbnN3ZXIgdG8geW91ciBxdWVzdGlv bnMgYnV0IGZyb20gbXkgZXhwZXJpZW5jZTo8YnI+CiZndDsmZ3Q7PGJyPgomZ3Q7Jmd0O8KgIMKg IMKgWGVuaWFsOiBXb3JrZWQsIGV4Y2VwdCBPVFAgZnVuY3Rpb25hbGl0eTxicj4KJmd0OyZndDvC oCDCoCDCoFplc3R5OiBXb3JrZWQgZXhjZXB0IGZvciBETlM8YnI+CiZndDsmZ3Q7wqAgwqAgwqBB cnRmdWw6IFNlZW1zIGZ1bGx5IGZ1bmN0aW9uYWwgYW5kIHN0YWJsZSBvbiB0aGUgZnJlc2ggaW5z dGFsbGVkPGJyPgomZ3Q7Jmd0O8KgIMKgIMKgcmVwbGljYSwgbXkgdXBncmFkZWQgZnJvbSBaZXN0 eSByaWcgKHdpdGggdGhlIHdvcmthcm91bmRzIG5vdGVkPGJyPgomZ3Q7Jmd0O8KgIMKgIMKgZWFy bGllciBpbiB0aHJlYWQpIFN0aWxsIGhhcyBwa2ktdG9tY2F0IGJvbWJpbmcgZmFpcmx5IGZyZXF1 ZW50bHkuPGJyPgomZ3Q7Jmd0O8KgIMKgIMKgQmlvbmljOiBJIGhhdmUgaGlnaCBob3BlcyBmb3Ig Z2l2ZW4gTFRTLi4gQ3VycmVudGx5IHNob3dpbmcgc2FtZTxicj4KJmd0OyZndDvCoCDCoCDCoHBh Y2thZ2UgdmVyc2lvbnM8YnI+CiZndDsmZ3Q7wqAgwqAgwqAmbHQ7PGEgaHJlZj0iaHR0cHM6Ly9w YWNrYWdlcy51YnVudHUuY29tL3NlYXJjaD9rZXl3b3Jkcz1mcmVlaXBhJmFtcDtzZWFyY2hvbj1u YW1lcyZhbXA7c3VpdGU9YmlvbmljJmFtcDtzZWN0aW9uPWFsbCIgcmVsPSJub3JlZmVycmVyIiB0 YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly9wYWNrYWdlcy51YnVudHUuY29tLzx3YnI+c2VhcmNoP2tl eXdvcmRzPWZyZWVpcGEmYW1wOzx3YnI+c2VhcmNob249bmFtZXMmYW1wO3N1aXRlPWJpb25pYyZh bXA7PHdicj5zZWN0aW9uPWFsbDwvYT4mZ3Q7PGJyPgomZ3Q7Jmd0O8KgIMKgIMKgNC40LjQgYXMg QXJ0ZnVsPGJyPgomZ3Q7Jmd0Ozxicj4KJmd0OyZndDvCoCDCoCDCoE1vc3Qgb2YgdGhlbSByZXF1 aXJlZCBzb21lIGNham9saW5nIGR1cmluZyBpbnN0YWxsIG9yIHVwZ3JhZGUgZHVlPGJyPgomZ3Q7 Jmd0O8KgIMKgIMKgdG8gYnJva2VuIGluc3RhbGxlciBjb21wb25lbnRzIChsaWtlIGRpcmVjdG9y aWVzIG5vdCBiZWluZyBjcmVhdGVkPGJyPgomZ3Q7Jmd0O8KgIMKgIMKgaW4gb25lIGNhc2UsIC9l dGMvcGtpL3BraS52ZXJzaW9uIGNvbmZ1c2luZyBwb3N0aW5zdGFsbCBpbjxicj4KJmd0OyZndDvC oCDCoCDCoGFub3RoZXIpLCBidXQgbW9zdCBvZiB0aGVzZSBiZWhhdmlvdXJzIHdlcmUgY2FwdHVy ZWQgYXMgYnVncyB0b28uPGJyPgomZ3Q7Jmd0O8KgIMKgIMKgSXQgZmVlbHMgdmVyeSBjbG9zZSB0 byBiZWluZyBzb21ldGhpbmcgdGhhdCBjYW4gYmUgcmVsaWFibHk8YnI+CiZndDsmZ3Q7wqAgwqAg wqBkZXBsb3llZCwgc28gSSBkb24mIzM5O3QgdGhpbmsgaXQgbmVlZHMgYSBodWdlIGFtb3VudCBt b3JlIFRMQyB0byBtYWtlPGJyPgomZ3Q7Jmd0O8KgIMKgIMKgaXQgbW9yZSBvZiBhIHBsZWFzdXJl IHRvIGluc3RhbGwgOyk8YnI+CiZndDsmZ3Q7PGJyPgomZ3Q7Jmd0O8KgIMKgIMKgQ2hlZXJzLDxi cj4KJmd0OyZndDs8YnI+CiZndDsmZ3Q7wqAgwqAgwqBEYXZpZDxicj4KJmd0OyZndDs8YnI+CiZn dDsmZ3Q7wqAgwqAgwqBPbiAyOCBOb3ZlbWJlciAyMDE3IGF0IDIwOjU4LCBQZXRlciBGZXJuIHZp YSBGcmVlSVBBLXVzZXJzPGJyPgomZ3Q7Jmd0O8KgIMKgIMKgJmx0OzxhIGhyZWY9Im1haWx0bzpm cmVlaXBhLXVzZXJzQGxpc3RzLmZlZG9yYWhvc3RlZC5vcmciPmZyZWVpcGEtdXNlcnNAbGlzdHMu PHdicj5mZWRvcmFob3N0ZWQub3JnPC9hPjxicj4KJmd0OyZndDvCoCDCoCDCoCZsdDttYWlsdG86 PGEgaHJlZj0ibWFpbHRvOmZyZWVpcGEtdXNlcnNAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZyI+ZnJl ZWlwYS11c2Vyc0BsaXN0cy48d2JyPmZlZG9yYWhvc3RlZC5vcmc8L2E+Jmd0OyZndDsgd3JvdGU6 PGJyPgomZ3Q7Jmd0Ozxicj4KJmd0OyZndDvCoCDCoCDCoCDCoCDCoE9uIDIzLzExLzE3IDA1OjM0 LCBEYXZpZCBIYXJ2ZXkgdmlhIEZyZWVJUEEtdXNlcnMgd3JvdGU6PGJyPgomZ3Q7Jmd0O8KgIMKg IMKgIMKgIMKgJmd0OyBOb3Qgc3VyZSB3aHkgdG9tY2F0IGlzIG1vcmUgcmVzaWxpZW50IHdoZW4g bGF1bmNoZWQgYXMgcm9vdCw8YnI+CiZndDsmZ3Q7wqAgwqAgwqAgwqAgwqBidXQgdGhlPGJyPgom Z3Q7Jmd0O8KgIMKgIMKgIMKgIMKgJmd0OyBwa2kgc2VlbXMgdG8gd29yayBvayBhdCBpc3N1aW5n IGNlcnRzIGFmdGVyIHRoZSBhYm92ZSBhbmQgYTxicj4KJmd0OyZndDvCoCDCoCDCoCDCoCDCoHJl Ym9vdCBmb3I8YnI+CiZndDsmZ3Q7wqAgwqAgwqAgwqAgwqAmZ3Q7IGdvb2QgbWVhc3VyZS48YnI+ CiZndDsmZ3Q7PGJyPgomZ3Q7Jmd0O8KgIMKgIMKgIMKgIMKgVGhpcyBzb3VuZHMgbGlrZSB0aGVy ZSBhcmUgYnJva2VuIHBlcm1pc3Npb25zIGluIHRoZSBjdXJyZW50PGJyPgomZ3Q7Jmd0O8KgIMKg IMKgIMKgIMKgVWJ1bnR1PGJyPgomZ3Q7Jmd0O8KgIMKgIMKgIMKgIMKgcGFja2FnZXMuwqAgWW91 IHNob3VsZCBiZSBhd2FyZSB0aGF0IGxhc3QgdGltZSBJIGNoZWNrZWQsPGJyPgomZ3Q7Jmd0O8Kg IMKgIMKgIMKgIMKgRnJlZUlQQSBvbjxicj4KJmd0OyZndDvCoCDCoCDCoCDCoCDCoFVidW50dSB3 YXMgc3VidGx5IHlldCBzZXZlcmVseSBicm9rZW4sIG1vc3RseSBkdWUgdG8gdGhlIE5TUyBsaWJz PGJyPgomZ3Q7Jmd0O8KgIMKgIMKgIMKgIMKgbWlzc2luZyBQRU0gc3VwcG9ydCwgd2hpY2ggd2ls bCBzdG9wIHlvdXIgQ0EgZnJvbSByZW5ld2luZyw8YnI+CiZndDsmZ3Q7wqAgwqAgwqAgwqAgwqBh bW9uZ3N0PGJyPgomZ3Q7Jmd0O8KgIMKgIMKgIMKgIMKgb3RoZXIgdGhpbmdzLjxicj4KJmd0OyZn dDs8YnI+CiZndDsmZ3Q7wqAgwqAgwqAgwqAgwqBEb2VzIGFueW9uZSBrbm93IHdoYXQgdGhlIHN0 YXRlIG9mIHBhY2thZ2luZyBmb3IgZGViIGRpc3Ryb3MgaXM8YnI+CiZndDsmZ3Q7wqAgwqAgwqAg wqAgwqBjdXJyZW50bHk/wqAgTm93IHRoYXQgdGhlIE9wZW5TU0wgbWlncmF0aW9uIGlzIGNvbXBs ZXRlKD8pLCB0aGU8YnI+CiZndDsmZ3Q7wqAgwqAgwqAgwqAgwqBiYXJyaWVyczxicj4KJmd0OyZn dDvCoCDCoCDCoCDCoCDCoHRvIGZ1bmN0aW9uYWwgcGFja2FnZXMgc2hvdWxkIGJlIHJlbW92ZWQs IGJ1dCBpdCBsb29rcyBsaWtlPGJyPgomZ3Q7Jmd0O8KgIMKgIMKgIMKgIMKgdGhhdCBvbmx5PGJy PgomZ3Q7Jmd0O8KgIMKgIMKgIMKgIMKgaGFwcGVuZWQgaW4gNC41LCBhbmQgaXQgYXBwZWFycyBv bmx5IDQuNCBpcyBwYWNrYWdlZCwgd2hpY2ggaXM8YnI+CiZndDsmZ3Q7wqAgwqAgwqAgwqAgwqBs aWtlbHk8YnI+CiZndDsmZ3Q7wqAgwqAgwqAgwqAgwqBzdGlsbCBicm9rZW4/PGJyPgomZ3Q7Jmd0 O8KgIMKgIMKgIMKgIMKgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPHdicj5fX19fX19f X19fX19fX19fXzxicj4KJmd0OyZndDvCoCDCoCDCoCDCoCDCoEZyZWVJUEEtdXNlcnMgbWFpbGlu ZyBsaXN0IC0tPGJyPgomZ3Q7Jmd0O8KgIMKgIMKgIMKgIMKgPGEgaHJlZj0ibWFpbHRvOmZyZWVp cGEtdXNlcnNAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZyI+ZnJlZWlwYS11c2Vyc0BsaXN0cy48d2Jy PmZlZG9yYWhvc3RlZC5vcmc8L2E+PGJyPgomZ3Q7Jmd0O8KgIMKgIMKgIMKgIMKgJmx0O21haWx0 bzo8YSBocmVmPSJtYWlsdG86ZnJlZWlwYS11c2Vyc0BsaXN0cy5mZWRvcmFob3N0ZWQub3JnIj5m cmVlaXBhLXVzZXJzQGxpc3RzLjx3YnI+ZmVkb3JhaG9zdGVkLm9yZzwvYT4mZ3Q7PGJyPgomZ3Q7 Jmd0O8KgIMKgIMKgIMKgIMKgVG8gdW5zdWJzY3JpYmUgc2VuZCBhbiBlbWFpbCB0bzxicj4KJmd0 OyZndDvCoCDCoCDCoCDCoCDCoDxhIGhyZWY9Im1haWx0bzpmcmVlaXBhLXVzZXJzLWxlYXZlQGxp c3RzLmZlZG9yYWhvc3RlZC5vcmciPmZyZWVpcGEtdXNlcnMtbGVhdmVAbGlzdHMuPHdicj5mZWRv cmFob3N0ZWQub3JnPC9hPjxicj4KJmd0OyZndDvCoCDCoCDCoCDCoCDCoCZsdDttYWlsdG86PGEg aHJlZj0ibWFpbHRvOmZyZWVpcGEtdXNlcnMtbGVhdmVAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZyI+ ZnJlZWlwYS11c2Vycy1sZWF2ZUA8d2JyPmxpc3RzLmZlZG9yYWhvc3RlZC5vcmc8L2E+Jmd0Ozxi cj4KJmd0OyZndDs8YnI+CiZndDsmZ3Q7PGJyPgomZ3Q7Jmd0Ozxicj4KJmd0OyZndDs8YnI+CiZn dDsmZ3Q7wqAgwqAgwqBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX188d2JyPl9fX19fX19f X19fX19fX19fPGJyPgomZ3Q7Jmd0O8KgIMKgIMKgRnJlZUlQQS11c2VycyBtYWlsaW5nIGxpc3Qg LS0gPGEgaHJlZj0ibWFpbHRvOmZyZWVpcGEtdXNlcnNAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZyI+ ZnJlZWlwYS11c2Vyc0BsaXN0cy48d2JyPmZlZG9yYWhvc3RlZC5vcmc8L2E+PGJyPgomZ3Q7Jmd0 O8KgIMKgIMKgJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86ZnJlZW9wZW5kbnNzZWNpcGEtdXNl cnNAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZyI+ZnJlZW9wZW5kbnNzZWNpcGEtPHdicj51c2Vyc0Bs aXN0cy5mZWRvcmFob3N0ZWQub3JnPC9hPiZndDs8YnI+CiZndDsmZ3Q7wqAgwqAgwqBUbyB1bnN1 YnNjcmliZSBzZW5kIGFuIGVtYWlsIHRvIDxhIGhyZWY9Im1haWx0bzpmcmVlaXBhLXVzZXJzLWxl YXZlQGxpc3RzLmZlZG9yYWhvc3RlZC5vcmciPmZyZWVpcGEtdXNlcnMtbGVhdmVAbGlzdHMuPHdi cj5mZWRvcmFob3N0ZWQub3JnPC9hPjxicj4KJmd0OyZndDvCoCDCoCDCoCZsdDttYWlsdG86PGEg aHJlZj0ibWFpbHRvOmZyZWVpcGEtdXNlcnMtbGVhdmVAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZyI+ ZnJlZWlwYS11c2Vycy1sZWF2ZUA8d2JyPmxpc3RzLmZlZG9yYWhvc3RlZC5vcmc8L2E+Jmd0Ozxi cj4KJmd0Ozxicj4KJmd0Ozxicj4KJmd0Ozxicj4KJmd0O8KgIMKgIMKgX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fPHdicj5fX19fX19fX19fX19fX19fXzxicj4KJmd0O8KgIMKgIMKgRnJl ZUlQQS11c2VycyBtYWlsaW5nIGxpc3QgLS0gPGEgaHJlZj0ibWFpbHRvOmZyZWVpcGEtdXNlcnNA bGlzdHMuZmVkb3JhaG9zdGVkLm9yZyI+ZnJlZWlwYS11c2Vyc0BsaXN0cy48d2JyPmZlZG9yYWhv c3RlZC5vcmc8L2E+PGJyPgomZ3Q7wqAgwqAgwqAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpm cmVlaXBhLXVzZXJzQGxpc3RzLmZlZG9yYWhvc3RlZC5vcmciPmZyZWVpcGEtdXNlcnNAbGlzdHMu PHdicj5mZWRvcmFob3N0ZWQub3JnPC9hPiZndDs8YnI+CiZndDvCoCDCoCDCoFRvIHVuc3Vic2Ny aWJlIHNlbmQgYW4gZW1haWwgdG88YnI+CiZndDvCoCDCoCDCoDxhIGhyZWY9Im1haWx0bzpmcmVl aXBhLXVzZXJzLWxlYXZlQGxpc3RzLmZlZG9yYWhvc3RlZC5vcmciPmZyZWVpcGEtdXNlcnMtbGVh dmVAbGlzdHMuPHdicj5mZWRvcmFob3N0ZWQub3JnPC9hPjxicj4KJmd0O8KgIMKgIMKgJmx0O21h aWx0bzo8YSBocmVmPSJtYWlsdG86ZnJlZWlwYS11c2Vycy1sZWF2ZUBsaXN0cy5mZWRvcmFob3N0 ZWQub3JnIj5mcmVlaXBhLXVzZXJzLWxlYXZlQDx3YnI+bGlzdHMuZmVkb3JhaG9zdGVkLm9yZzwv YT4mZ3Q7PGJyPgomZ3Q7PGJyPgomZ3Q7PGJyPgomZ3Q7PGJyPgomZ3Q7PGJyPgomZ3Q7IF9fX19f X19fX19fX19fX19fX19fX19fX19fX19fXzx3YnI+X19fX19fX19fX19fX19fX188YnI+CiZndDsg RnJlZUlQQS11c2VycyBtYWlsaW5nIGxpc3QgLS0gPGEgaHJlZj0ibWFpbHRvOmZyZWVpcGEtdXNl cnNAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZyI+ZnJlZWlwYS11c2Vyc0BsaXN0cy48d2JyPmZlZG9y YWhvc3RlZC5vcmc8L2E+PGJyPgomZ3Q7IFRvIHVuc3Vic2NyaWJlIHNlbmQgYW4gZW1haWwgdG8g PGEgaHJlZj0ibWFpbHRvOmZyZWVpcGEtdXNlcnMtbGVhdmVAbGlzdHMuZmVkb3JhaG9zdGVkLm9y ZyI+ZnJlZWlwYS11c2Vycy1sZWF2ZUBsaXN0cy48d2JyPmZlZG9yYWhvc3RlZC5vcmc8L2E+PGJy PgomZ3Q7PGJyPgo8YnI+CjwvYmxvY2txdW90ZT48L2Rpdj48L2Rpdj4K --===============4258684136862177531==-- From tjaalton at ubuntu.com Wed Dec 13 23:33:05 2017 Content-Type: multipart/mixed; boundary="===============5215182172795683385==" MIME-Version: 1.0 From: Timo Aaltonen To: freeipa-users at lists.fedorahosted.org Subject: [Freeipa-users] Re: upgrade to ubuntu 17.10 fails Date: Thu, 14 Dec 2017 01:29:51 +0200 Message-ID: <957e1c4d-1031-caea-0191-cd0c69a9c5fc@ubuntu.com> In-Reply-To: 114e9a53-dbc1-0b41-4b22-51d2c4aa979f@0xc0dedbad.com --===============5215182172795683385== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable On 28.11.2017 22:58, Peter Fern via FreeIPA-users wrote: > On 23/11/17 05:34, David Harvey via FreeIPA-users wrote: >> Not sure why tomcat is more resilient when launched as root, but the >> pki seems to work ok at issuing certs after the above and a reboot for >> good measure. > = > This sounds like there are broken permissions in the current Ubuntu > packages.=C2=A0 You should be aware that last time I checked, FreeIPA on > Ubuntu was subtly yet severely broken, mostly due to the NSS libs > missing PEM support, which will stop your CA from renewing, amongst > other things. I'd like to get a bug filed for each issue you find. For instance that upgrade thing should already be fixed but sounds like it isn't? And yes, not being able to package nss-pem does mean the CA is less than useful. Maybe I should try to gently force the libnss maintainer to ship the needed (static) libs to be able to finish packaging nss-pem.. > Does anyone know what the state of packaging for deb distros is > currently?=C2=A0 Now that the OpenSSL migration is complete(?), the barri= ers > to functional packages should be removed, but it looks like that only > happened in 4.5, and it appears only 4.4 is packaged, which is likely > still broken? Freeipa is/was stuck at 4.4 because getting bind9 9.11 in the archive took a year. That's now fixed, and I'm working on 4.6.x. But I need to update the whole stack, so right now I'm stuck with Dogtag 10.5.3 not building because it needed a newer (and patched) ldapjdk. Uploaded it today but it won't build before the (Debian) archive is otherwise untangled. Anyway, for Ubuntu 18.04 I might be forced to drop support for the CA altogether, as it looks like Dogtag won't get fixed to support Tomcat 8.5 and RESTEasy 3.1 (and maybe others I haven't found out about yet) in time. Oh and I need to package the JBOSS version of jaxrs-api too, since the current alternative broke things when it got updated.. fun times ahead, as always. t --===============5215182172795683385==-- From davidcharvey at googlemail.com Thu Dec 14 17:06:23 2017 Content-Type: multipart/mixed; boundary="===============4471260032501923333==" MIME-Version: 1.0 From: David Harvey To: freeipa-users at lists.fedorahosted.org Subject: [Freeipa-users] Re: upgrade to ubuntu 17.10 fails Date: Thu, 14 Dec 2017 17:06:01 +0000 Message-ID: In-Reply-To: 957e1c4d-1031-caea-0191-cd0c69a9c5fc@ubuntu.com --===============4471260032501923333== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable On 13 December 2017 at 23:29, Timo Aaltonen via FreeIPA-users < freeipa-users(a)lists.fedorahosted.org> wrote: > On 28.11.2017 22:58, Peter Fern via FreeIPA-users wrote: > > On 23/11/17 05:34, David Harvey via FreeIPA-users wrote: > >> Not sure why tomcat is more resilient when launched as root, but the > >> pki seems to work ok at issuing certs after the above and a reboot for > >> good measure. > > > > This sounds like there are broken permissions in the current Ubuntu > > packages. You should be aware that last time I checked, FreeIPA on > > Ubuntu was subtly yet severely broken, mostly due to the NSS libs > > missing PEM support, which will stop your CA from renewing, amongst > > other things. > > I'd like to get a bug filed for each issue you find. For instance that > upgrade thing should already be fixed but sounds like it isn't? > It's absolutely possible that the state of my upgrade didn't take in or countered your fixes due to my hacking around issues that reared their heads during the initial 17.04 install i upgraded from. Now that I'm upgraded it's a little harder to find out, but will see if I have any backups hanging around from the before upgrade state. > > And yes, not being able to package nss-pem does mean the CA is less than > useful. Maybe I should try to gently force the libnss maintainer to ship > the needed (static) libs to be able to finish packaging nss-pem.. > > > Does anyone know what the state of packaging for deb distros is > > currently? Now that the OpenSSL migration is complete(?), the barriers > > to functional packages should be removed, but it looks like that only > > happened in 4.5, and it appears only 4.4 is packaged, which is likely > > still broken? > > Freeipa is/was stuck at 4.4 because getting bind9 9.11 in the archive > took a year. That's now fixed, and I'm working on 4.6.x. But I need to > update the whole stack, so right now I'm stuck with Dogtag 10.5.3 not > building because it needed a newer (and patched) ldapjdk. Uploaded it > today but it won't build before the (Debian) archive is otherwise > untangled. > > Anyway, for Ubuntu 18.04 I might be forced to drop support for the CA > altogether, as it looks like Dogtag won't get fixed to support Tomcat > 8.5 and RESTEasy 3.1 (and maybe others I haven't found out about yet) in > time. Oh and I need to package the JBOSS version of jaxrs-api too, since > the current alternative broke things when it got updated.. fun times > ahead, as always. > > Oh crikey, that sounds like as much fun as pulling teeth. I can hold out a bit longer on the (as far as I can tell), very functional 17.10 install. Will make a call on it nearer the 18.04 time, but might make the jump to Fedora or the Docker based installs if things aren't looking good for the state of Ubuntu by then.. Thanks for the taking the time to explain the state of affairs. Appreciate your work as ever. David t > > > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.= org > --===============4471260032501923333== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PGRpdiBkaXI9Imx0ciI+PGJyPjxkaXYgY2xhc3M9ImdtYWlsX2V4dHJhIj48YnI+PGRpdiBjbGFz cz0iZ21haWxfcXVvdGUiPk9uIDEzIERlY2VtYmVyIDIwMTcgYXQgMjM6MjksIFRpbW8gQWFsdG9u ZW4gdmlhIEZyZWVJUEEtdXNlcnMgPHNwYW4gZGlyPSJsdHIiPiZsdDs8YSBocmVmPSJtYWlsdG86 ZnJlZWlwYS11c2Vyc0BsaXN0cy5mZWRvcmFob3N0ZWQub3JnIiB0YXJnZXQ9Il9ibGFuayI+ZnJl ZWlwYS11c2Vyc0BsaXN0cy5mZWRvcmFob3N0ZWQub3JnPC9hPiZndDs8L3NwYW4+IHdyb3RlOjxi cj48YmxvY2txdW90ZSBjbGFzcz0iZ21haWxfcXVvdGUiIHN0eWxlPSJtYXJnaW46MCAwIDAgLjhl eDtib3JkZXItbGVmdDoxcHggI2NjYyBzb2xpZDtwYWRkaW5nLWxlZnQ6MWV4Ij48c3BhbiBjbGFz cz0iIj5PbiAyOC4xMS4yMDE3IDIyOjU4LCBQZXRlciBGZXJuIHZpYSBGcmVlSVBBLXVzZXJzIHdy b3RlOjxicj4KJmd0OyBPbiAyMy8xMS8xNyAwNTozNCwgRGF2aWQgSGFydmV5IHZpYSBGcmVlSVBB LXVzZXJzIHdyb3RlOjxicj4KJmd0OyZndDsgTm90IHN1cmUgd2h5IHRvbWNhdCBpcyBtb3JlIHJl c2lsaWVudCB3aGVuIGxhdW5jaGVkIGFzIHJvb3QsIGJ1dCB0aGU8YnI+CiZndDsmZ3Q7IHBraSBz ZWVtcyB0byB3b3JrIG9rIGF0IGlzc3VpbmcgY2VydHMgYWZ0ZXIgdGhlIGFib3ZlIGFuZCBhIHJl Ym9vdCBmb3I8YnI+CiZndDsmZ3Q7IGdvb2QgbWVhc3VyZS48YnI+CiZndDs8YnI+CiZndDsgVGhp cyBzb3VuZHMgbGlrZSB0aGVyZSBhcmUgYnJva2VuIHBlcm1pc3Npb25zIGluIHRoZSBjdXJyZW50 IFVidW50dTxicj4KJmd0OyBwYWNrYWdlcy7CoCBZb3Ugc2hvdWxkIGJlIGF3YXJlIHRoYXQgbGFz dCB0aW1lIEkgY2hlY2tlZCwgRnJlZUlQQSBvbjxicj4KJmd0OyBVYnVudHUgd2FzIHN1YnRseSB5 ZXQgc2V2ZXJlbHkgYnJva2VuLCBtb3N0bHkgZHVlIHRvIHRoZSBOU1MgbGliczxicj4KJmd0OyBt aXNzaW5nIFBFTSBzdXBwb3J0LCB3aGljaCB3aWxsIHN0b3AgeW91ciBDQSBmcm9tIHJlbmV3aW5n LCBhbW9uZ3N0PGJyPgomZ3Q7IG90aGVyIHRoaW5ncy48YnI+Cjxicj4KPC9zcGFuPkkmIzM5O2Qg bGlrZSB0byBnZXQgYSBidWcgZmlsZWQgZm9yIGVhY2ggaXNzdWUgeW91IGZpbmQuIEZvciBpbnN0 YW5jZSB0aGF0PGJyPgp1cGdyYWRlIHRoaW5nIHNob3VsZCBhbHJlYWR5IGJlIGZpeGVkIGJ1dCBz b3VuZHMgbGlrZSBpdCBpc24mIzM5O3Q/PGJyPjwvYmxvY2txdW90ZT48ZGl2Pjxicj48L2Rpdj48 ZGl2Pkl0JiMzOTtzIGFic29sdXRlbHkgcG9zc2libGUgdGhhdCB0aGUgc3RhdGUgb2YgbXkgdXBn cmFkZSBkaWRuJiMzOTt0IHRha2UgaW4gb3IgY291bnRlcmVkIHlvdXIgZml4ZXMgZHVlIHRvIG15 IGhhY2tpbmcgYXJvdW5kIGlzc3VlcyB0aGF0IHJlYXJlZCB0aGVpciBoZWFkcyBkdXJpbmcgdGhl IGluaXRpYWwgMTcuMDQgaW5zdGFsbCBpIHVwZ3JhZGVkIGZyb20uPC9kaXY+PGRpdj5Ob3cgdGhh dCBJJiMzOTttIHVwZ3JhZGVkIGl0JiMzOTtzIGEgbGl0dGxlIGhhcmRlciB0byBmaW5kIG91dCwg YnV0IHdpbGwgc2VlIGlmIEkgaGF2ZSBhbnkgYmFja3VwcyBoYW5naW5nIGFyb3VuZCBmcm9tIHRo ZSBiZWZvcmUgdXBncmFkZSBzdGF0ZS48L2Rpdj48ZGl2PsKgPC9kaXY+PGJsb2NrcXVvdGUgY2xh c3M9ImdtYWlsX3F1b3RlIiBzdHlsZT0ibWFyZ2luOjAgMCAwIC44ZXg7Ym9yZGVyLWxlZnQ6MXB4 ICNjY2Mgc29saWQ7cGFkZGluZy1sZWZ0OjFleCI+Cjxicj4KQW5kIHllcywgbm90IGJlaW5nIGFi bGUgdG8gcGFja2FnZSBuc3MtcGVtIGRvZXMgbWVhbiB0aGUgQ0EgaXMgbGVzcyB0aGFuPGJyPgp1 c2VmdWwuIE1heWJlIEkgc2hvdWxkIHRyeSB0byBnZW50bHkgZm9yY2UgdGhlIGxpYm5zcyBtYWlu dGFpbmVyIHRvIHNoaXA8YnI+CnRoZSBuZWVkZWQgKHN0YXRpYykgbGlicyB0byBiZSBhYmxlIHRv IGZpbmlzaCBwYWNrYWdpbmcgbnNzLXBlbS4uPGJyPgo8c3BhbiBjbGFzcz0iIj48YnI+CiZndDsg RG9lcyBhbnlvbmUga25vdyB3aGF0IHRoZSBzdGF0ZSBvZiBwYWNrYWdpbmcgZm9yIGRlYiBkaXN0 cm9zIGlzPGJyPgomZ3Q7IGN1cnJlbnRseT/CoCBOb3cgdGhhdCB0aGUgT3BlblNTTCBtaWdyYXRp b24gaXMgY29tcGxldGUoPyksIHRoZSBiYXJyaWVyczxicj4KJmd0OyB0byBmdW5jdGlvbmFsIHBh Y2thZ2VzIHNob3VsZCBiZSByZW1vdmVkLCBidXQgaXQgbG9va3MgbGlrZSB0aGF0IG9ubHk8YnI+ CiZndDsgaGFwcGVuZWQgaW4gNC41LCBhbmQgaXQgYXBwZWFycyBvbmx5IDQuNCBpcyBwYWNrYWdl ZCwgd2hpY2ggaXMgbGlrZWx5PGJyPgomZ3Q7IHN0aWxsIGJyb2tlbj88YnI+Cjxicj4KPC9zcGFu PkZyZWVpcGEgaXMvd2FzIHN0dWNrIGF0IDQuNCBiZWNhdXNlIGdldHRpbmcgYmluZDkgOS4xMSBp biB0aGUgYXJjaGl2ZTxicj4KdG9vayBhIHllYXIuIFRoYXQmIzM5O3Mgbm93IGZpeGVkLCBhbmQg SSYjMzk7bSB3b3JraW5nIG9uIDQuNi54LiBCdXQgSSBuZWVkIHRvPGJyPgp1cGRhdGUgdGhlIHdo b2xlIHN0YWNrLCBzbyByaWdodCBub3cgSSYjMzk7bSBzdHVjayB3aXRoIERvZ3RhZyAxMC41LjMg bm90PGJyPgpidWlsZGluZyBiZWNhdXNlIGl0IG5lZWRlZCBhIG5ld2VyIChhbmQgcGF0Y2hlZCkg bGRhcGpkay4gVXBsb2FkZWQgaXQ8YnI+CnRvZGF5IGJ1dCBpdCB3b24mIzM5O3QgYnVpbGQgYmVm b3JlIHRoZSAoRGViaWFuKSBhcmNoaXZlIGlzIG90aGVyd2lzZSB1bnRhbmdsZWQuPGJyPgo8YnI+ CkFueXdheSwgZm9yIFVidW50dSAxOC4wNCBJIG1pZ2h0IGJlIGZvcmNlZCB0byBkcm9wIHN1cHBv cnQgZm9yIHRoZSBDQTxicj4KYWx0b2dldGhlciwgYXMgaXQgbG9va3MgbGlrZSBEb2d0YWcgd29u JiMzOTt0IGdldCBmaXhlZCB0byBzdXBwb3J0IFRvbWNhdDxicj4KOC41IGFuZCBSRVNURWFzeSAz LjEgKGFuZCBtYXliZSBvdGhlcnMgSSBoYXZlbiYjMzk7dCBmb3VuZCBvdXQgYWJvdXQgeWV0KSBp bjxicj4KdGltZS4gT2ggYW5kIEkgbmVlZCB0byBwYWNrYWdlIHRoZSBKQk9TUyB2ZXJzaW9uIG9m IGpheHJzLWFwaSB0b28sIHNpbmNlPGJyPgp0aGUgY3VycmVudCBhbHRlcm5hdGl2ZSBicm9rZSB0 aGluZ3Mgd2hlbiBpdCBnb3QgdXBkYXRlZC4uIGZ1biB0aW1lczxicj4KYWhlYWQsIGFzIGFsd2F5 cy48YnI+Cjxicj48L2Jsb2NrcXVvdGU+PGRpdj5PaCBjcmlrZXksIHRoYXQgc291bmRzIGxpa2Ug YXMgbXVjaCBmdW4gYXMgcHVsbGluZyB0ZWV0aC7CoDwvZGl2PjxkaXY+SSBjYW4gaG9sZCBvdXQg YSBiaXQgbG9uZ2VyIG9uIHRoZSAoYXMgZmFyIGFzIEkgY2FuIHRlbGwpLCB2ZXJ5IGZ1bmN0aW9u YWwgMTcuMTAgaW5zdGFsbC4gV2lsbCBtYWtlIGEgY2FsbCBvbiBpdCBuZWFyZXIgdGhlIDE4LjA0 IHRpbWUsIGJ1dCBtaWdodCBtYWtlIHRoZSBqdW1wIHRvIEZlZG9yYSBvciB0aGUgRG9ja2VyIGJh c2VkIGluc3RhbGxzIGlmIHRoaW5ncyBhcmVuJiMzOTt0IGxvb2tpbmcgZ29vZCBmb3IgdGhlIHN0 YXRlIG9mIFVidW50dSBieSB0aGVuLi48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PlRoYW5rcyBm b3IgdGhlIHRha2luZyB0aGUgdGltZSB0byBleHBsYWluIHRoZSBzdGF0ZSBvZiBhZmZhaXJzLiBB cHByZWNpYXRlIHlvdXIgd29yayBhcyBldmVyLjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+RGF2 aWQ8L2Rpdj48ZGl2Pjxicj48L2Rpdj48YmxvY2txdW90ZSBjbGFzcz0iZ21haWxfcXVvdGUiIHN0 eWxlPSJtYXJnaW46MCAwIDAgLjhleDtib3JkZXItbGVmdDoxcHggI2NjYyBzb2xpZDtwYWRkaW5n LWxlZnQ6MWV4Ij4KdDxicj4KPGRpdiBjbGFzcz0iSE9FblpiIj48ZGl2IGNsYXNzPSJoNSI+PGJy Pgo8YnI+Cl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzx3YnI+X19fX19fX19fX19fX19f X188YnI+CkZyZWVJUEEtdXNlcnMgbWFpbGluZyBsaXN0IC0tIDxhIGhyZWY9Im1haWx0bzpmcmVl aXBhLXVzZXJzQGxpc3RzLmZlZG9yYWhvc3RlZC5vcmciPmZyZWVpcGEtdXNlcnNAbGlzdHMuPHdi cj5mZWRvcmFob3N0ZWQub3JnPC9hPjxicj4KVG8gdW5zdWJzY3JpYmUgc2VuZCBhbiBlbWFpbCB0 byA8YSBocmVmPSJtYWlsdG86ZnJlZWlwYS11c2Vycy1sZWF2ZUBsaXN0cy5mZWRvcmFob3N0ZWQu b3JnIj5mcmVlaXBhLXVzZXJzLWxlYXZlQGxpc3RzLjx3YnI+ZmVkb3JhaG9zdGVkLm9yZzwvYT48 YnI+CjwvZGl2PjwvZGl2PjwvYmxvY2txdW90ZT48L2Rpdj48YnI+PC9kaXY+PC9kaXY+Cg== --===============4471260032501923333==--